CVE-2022-50767
kernel: fbdev: smscufx: Fix several use-after-free bugs
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · December 24, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
fbdev: smscufx: Fix several use-after-free bugs
Several types of UAFs can occur when physically removing a USB device.
Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and in this function, there is kref_put() that finally calls ufx_free().
This fix prevents multiple UAFs.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified