CVE-2022-50642
Description
In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: zero out stale pointers `cros_typec_get_switch_handles` allocates four pointers when obtaining type-c switch handles. These pointers are all freed if failing to obtain any of them; therefore, pointers in `port` become stale. The stale pointers eventually cause use-after-free or double free in later code paths. Zeroing out all pointer fields after freeing to eliminate these stale pointers.
How to fix
- Linux Linux0ceadb5a3e45f1b81cf54bd496b40a5e50b6bd40, b610758bb3e0674644c1255cdafc2f46b7e05ff9, 6613f36a2fa5c69e528bccba8b3d831f759dad2f, 9a8aadcf0b459c1257b9477fd6402e1d5952ae07 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f28adb41dab4a2795fd959750df57adffd2bb0be ≤ v < 0ceadb5a3e45f1b81cf54bd496b40a5e50b6bd40, f28adb41dab4a2795fd959750df57adffd2bb0be ≤ v < b610758bb3e0674644c1255cdafc2f46b7e05ff9, f28adb41dab4a2795fd959750df57adffd2bb0be ≤ v < 6613f36a2fa5c69e528bccba8b3d831f759dad2f, f28adb41dab4a2795fd959750df57adffd2bb0be ≤ v < 9a8aadcf0b459c1257b9477fd6402e1d5952ae07, 5.9 | 0ceadb5a3e45f1b81cf54bd496b40a5e50b6bd40, b610758bb3e0674644c1255cdafc2f46b7e05ff9, 6613f36a2fa5c69e528bccba8b3d831f759dad2f, 9a8aadcf0b459c1257b9477fd6402e1d5952ae07 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.