https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:55:58 +0000 https://cve.radiocsirt.org/vuln/cve-2022-49388 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ubi: ubi_create_volume: Fix use-after-free when volume creation failed</p> <p>There is an use-after-free problem for &#39;eba_tbl&#39; in ubi_create_volume()&#39;s error handling path:</p> <p>ubi_eba_replace_table(vol, eba_tbl) vol-&gt;eba_tbl = tbl out_mapping: ubi_eba_destroy_table(eba_tbl) // Free &#39;eba_tbl&#39; out_unlock: put_device(&amp;vol-&gt;dev) vol_release kfree(tbl-&gt;entries) // UAF</p> <p>Fix it by removing redundant &#39;eba_tbl&#39; releasing. Fetch a reproducer in [Link].</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ubi: ubi_create_volume: Fix use-after-free when volume creation failed</p> <p>There is an use-after-free problem for &#39;eba_tbl&#39; in ubi_create_volume()&#39;s error handling path:</p> <p>ubi_eba_replace_table(vol, eba_tbl) vol-&gt;eba_tbl = tbl out_mapping: ubi_eba_destroy_table(eba_tbl) // Free &#39;eba_tbl&#39; out_unlock: put_device(&amp;vol-&gt;dev) vol_release kfree(tbl-&gt;entries) // UAF</p> <p>Fix it by removing redundant &#39;eba_tbl&#39; releasing. Fetch a reproducer in [Link].</p> https://cve.radiocsirt.org/vuln/cve-2022-49388