CVE-2022-50423

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc7

Description The Linux kernel contains a use-after-free flaw within the ACPICA component, specifically in the acpi ut copy ipackage to ipackage() function. This issue arises from the improper handling of memory freeing during package copying operations. The root cause is related to a previous fix for a memory leak, which inadvertently introduced the use-after-free condition. The vulnerability occurs when acpi ut copy ipackage to ipackage() fails, leading to the repeated release of an acpi operand object and its subsequent use after being freed. The function acpi ut remove reference() is involved in the issue.

Recommendations Update to a version newer than 6.1.0-rc7.