CVE-2022-49029
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: '&data->list' not removed from list If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will be freed, but data->list will not be removed from driver_data.bmc_data, then list traversal may cause UAF. Fix by removeing it from driver_data.bmc_data before free().
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | f2a13196ad41c6c2ab058279dffe6c97292e753a | Unavailable | None listed |
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | 798198273bf86673b970b51acdb35e57f42b3fcb | Unavailable | None listed |
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | 24b9633f7db7f4809be7053df1d2e117e7c2de10 | Unavailable | None listed |
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | 7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3 | Unavailable | None listed |
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | 90907cd4d11351ff76c9a447bcb5db0e264c47cd | Unavailable | None listed |
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | 45f6e81863747c0d7bc6a95ec51129900e71467a | Unavailable | None listed |
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863 | Unavailable | None listed |
| 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab | affected | git | e2a87785aab0dac190ac89be6a9ba955e2c634f2 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.24 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.24 | Unavailable | None listed |
| 4.9.335 | unaffected | semver | Unavailable | 4.9.* | None listed |
| 4.14.301 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.268 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.226 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.158 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.82 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.0.12 | unaffected | semver | Unavailable | 6.0.* | None listed |
| 6.1 | unaffected | original_commit_for_fix | Unavailable | * | None listed |