Use-After-Free Vulnerability in Linux Kernel ASoC Core Component

CVE-2022-49842

Summary

A use-after-free vulnerability was identified in the Linux kernel's ASoC core component. This issue arises during the initialization and exit processes of the sound system, specifically when the 'snd_soc_util_init()' function fails and the error is neglected. The failure leads to the 'soc_dummy_dev' being unregistered multiple times, triggering a use-after-free condition. This vulnerability may affect system stability and could be exploited in a way that compromises the integrity of kernel memory, resulting in unpredictable behavior or system crashes. The resolution involved proper error handling during initialization to prevent such occurrences.

References