CVE-2022-50767

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains use-after-free flaws within the fbdev and smscufx components. These flaws can occur when a USB device is physically removed. The fix introduces the ufx ops destroy() function to the fb destroy method of fb ops, which includes a kref put() call that ultimately invokes ufx free(). This change aims to prevent multiple use-after-free conditions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.