CVE-2022-50411

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in acpi ps parse aml() following a failing invocation of acpi ds call control method(). The issue occurs because a walk state pushed to the thread is freed on errors but not popped from the thread beforehand, leading acpi ds get current walk state() to return an incorrect walk state.

Recommendations Call acpi ds pop walk state() within acpi ds call control method() before returning an error.