CVE-2022-50034
usb: cdns3 fix use-after-free at workaround 2
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3 fix use-after-free at workaround 2 BUG: KFENCE: use-after-free read in __list_del_entry_valid+0x10/0xac cdns3_wa2_remove_old_request() { ... kfree(priv_req->request.buf); cdns3_gadget_ep_free_request(&priv_ep->endpoint, &priv_req->request); list_del_init(&priv_req->list); ^^^ use after free ... } cdns3_gadget_ep_free_request() free the space pointed by priv_req, but priv_req is used in the following list_del_init(). This patch move list_del_init() before cdns3_gadget_ep_free_request().
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Jun 18, 2025 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
8bc1901ca7b07d864fca11461b3875b31f949765 < e65d9b7147d7be3504893ca7dfb85286bda83d40 8bc1901ca7b07d864fca11461b3875b31f949765 < 6d7ac60098b206d0472475b666cb09d556bec03d 8bc1901ca7b07d864fca11461b3875b31f949765 < c3c1dbad3a2db32ecf371c97f2058491b8ba0f9a 8bc1901ca7b07d864fca11461b3875b31f949765 < 6fd50446e7c9a98b4bcf96815f5c9602a16ea472 8bc1901ca7b07d864fca11461b3875b31f949765 < 7d602f30149a117eea260208b1661bc404c21dfd
Linux / Linux
5.3
References
git.kernel.org: https://git.kernel.org/stable/c/e65d9b7147d7be3504893ca7dfb85286bda83d40 git.kernel.org: https://git.kernel.org/stable/c/6d7ac60098b206d0472475b666cb09d556bec03d git.kernel.org: https://git.kernel.org/stable/c/c3c1dbad3a2db32ecf371c97f2058491b8ba0f9a git.kernel.org: https://git.kernel.org/stable/c/6fd50446e7c9a98b4bcf96815f5c9602a16ea472 git.kernel.org: https://git.kernel.org/stable/c/7d602f30149a117eea260208b1661bc404c21dfd