https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:50:36 +0000 https://cve.radiocsirt.org/vuln/cve-2022-48854 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: arc_emac: Fix use after free in arc_mdio_probe()</p> <p>If bus-&gt;state is equal to MDIOBUS_ALLOCATED, mdiobus_free(bus) will free the &#34;bus&#34;. But bus-&gt;name is still used in the next line, which will lead to a use after free.</p> <p>We can fix it by putting the name in a local variable and make the bus-&gt;name point to the rodata section &#34;name&#34;,then use the name in the error message without referring to bus to avoid the uaf.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: arc_emac: Fix use after free in arc_mdio_probe()</p> <p>If bus-&gt;state is equal to MDIOBUS_ALLOCATED, mdiobus_free(bus) will free the &#34;bus&#34;. But bus-&gt;name is still used in the next line, which will lead to a use after free.</p> <p>We can fix it by putting the name in a local variable and make the bus-&gt;name point to the rodata section &#34;name&#34;,then use the name in the error message without referring to bus to avoid the uaf.</p> https://cve.radiocsirt.org/vuln/cve-2022-48854