CVE Database›CVE-2022-50767

CVE-2022-50767

kernel: fbdev: smscufx: Fix several use-after-free bugs

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · December 24, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: smscufx: Fix several use-after-free bugs

Several types of UAFs can occur when physically removing a USB device.

Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and in this function, there is kref_put() that finally calls ufx_free().

This fix prevents multiple UAFs.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified