Use-After-Free Vulnerability in si470x Device Driver by Linux Kernel

CVE-2022-50542

What is CVE-2022-50542?

The si470x device driver in the Linux kernel experienced a use-after-free vulnerability due to improper memory handling in the si470x_int_in_callback() function. This occurred when the function tried to access memory that had already been freed, specifically after the completion or failure of USB operations. To address this, a patch was implemented to ensure that memory is properly managed, especially when operations fail, thereby mitigating any potential security risks associated with the vulnerability.

References