CVE-2022-50034

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the cdns3 gadget driver. The problem occurs when the cdns3 gadget ep free request() function frees the space pointed to by priv req, but priv req is still used in the subsequent list del init() call. This can lead to a use-after-free read in the list del entry valid() function. The issue is resolved by moving the list del init() call before the cdns3 gadget ep free request() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.