CVE-2022-50087

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's arm scpi firmware, where the scpi info is not properly handled when the scpi probe fails. This could result in a use-after-free scenario, as the value is exported via get scpi ops() and could refer to memory allocated via devm kzalloc() but freed when the probe fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.