CVE-2022-50423

A flaw was found in the Linux kernel. This use-after-free vulnerability exists within the Advanced Configuration and Power Interface (ACPI) subsystem. A local attacker with low privileges could exploit this flaw, leading to memory corruption. This could result in information disclosure or a denial of service (DoS) on the system.

A use-after-free vulnerability was found in the Linux kernel's ACPI (ACPICA) subsystem. When acpi_ut_walk_package_tree() fails while copying an internal package object in acpi_ut_copy_ipackage_to_ipackage(), the acpi_operand_object is freed prematurely and then referenced again in acpi_ut_copy_iobject_to_iobject(). A local attacker with low privileges who can trigger this code path during ACPI AML evaluation could cause memory corruption, resulting in information disclosure or a denial of service. Red Hat rates this flaw as Moderate (CVSS 6.1, AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) because exploitation requires local low-privileged access and the most likely consequences are limited information disclosure and system crash or instability; this is lower than the 7.8 (Important) severity assigned by NIST, which assumes high confidentiality and integrity impacts. The kernel and kernel-rt packages in Red Hat Enterprise Linux 8 (8.2, 8.4, 8.6, and 8.8 z-streams) and Red Hat Enterprise Linux 9 (9.0 and 9.2 z-streams) are affected; fixes for these older maintenance streams are deferred, so the residual risk remains that a local low-privileged user could trigger the use-after-free and cause information disclosure or denial of service. Red Hat Enterprise Linux 7, RHEL 8.10, RHEL 9.4 and later, RHEL 10, and Red Hat In-Vehicle OS are not affected because the vulnerable code is not present in those streams.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.