CVE-2022-50767
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: Fix several use-after-free bugs Several types of UAFs can occur when physically removing a USB device. Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and in this function, there is kref_put() that finally calls ufx_free(). This fix prevents multiple UAFs.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux6f2075ea883e5d7730d0c9ebb1bb8e7a1a7e953f, 3f40852d671072836fb7ae331a1f28a24223c4e8, 70faf9d9b6cc74418716bbf76fe75bd2da10ad4a, 5385af2f89bc352fb70753ab41b2bb036190141f, d9ddfeb01fb95ffbbc7031d46a5ee2a5e45cbb86, cc6a7249842fceda7574ceb63275a2d5e99d2862, 8d924b262f3178a9b17c17d4306a9f426c508bd9, cc67482c9e5f2c80d62f623bcc347c29f9f648e1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < 6f2075ea883e5d7730d0c9ebb1bb8e7a1a7e953f, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < 3f40852d671072836fb7ae331a1f28a24223c4e8, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < 70faf9d9b6cc74418716bbf76fe75bd2da10ad4a, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < 5385af2f89bc352fb70753ab41b2bb036190141f, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < d9ddfeb01fb95ffbbc7031d46a5ee2a5e45cbb86, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < cc6a7249842fceda7574ceb63275a2d5e99d2862, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < 8d924b262f3178a9b17c17d4306a9f426c508bd9, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ≤ v < cc67482c9e5f2c80d62f623bcc347c29f9f648e1, 3.2 | 6f2075ea883e5d7730d0c9ebb1bb8e7a1a7e953f, 3f40852d671072836fb7ae331a1f28a24223c4e8, 70faf9d9b6cc74418716bbf76fe75bd2da10ad4a, 5385af2f89bc352fb70753ab41b2bb036190141f, d9ddfeb01fb95ffbbc7031d46a5ee2a5e45cbb86, cc6a7249842fceda7574ceb63275a2d5e99d2862, 8d924b262f3178a9b17c17d4306a9f426c508bd9, cc67482c9e5f2c80d62f623bcc347c29f9f648e1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.