In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free priv. But priv is still in the chdev->file_list, then list traversal may cause UAF. This fixes the following smatch warning: drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/02d7d89f816951e0862147d751b1150d67aaebdd cve-icon cve-icon
https://git.kernel.org/stable/c/2a6c75adf8192f07ddcdd4a1a13488c890a73919 cve-icon cve-icon
https://git.kernel.org/stable/c/2ba06e57f933f0eac242e8b389433da1cc00d4d5 cve-icon cve-icon
https://git.kernel.org/stable/c/2dfd60724d271a6ab99f93f40f38f2ced1ddbb87 cve-icon cve-icon
https://git.kernel.org/stable/c/2f5cc7fd73fd6253cc71214f0dd499cc62feb469 cve-icon cve-icon
https://git.kernel.org/stable/c/311b488405ac45af46756b1c8f1d27007b68b07e cve-icon cve-icon
https://git.kernel.org/stable/c/5ee850645e42f541ce1ea8130c2b27cc495f965c cve-icon cve-icon
https://git.kernel.org/stable/c/a253dde0403a153075ffb254f6f7b2635e49e97a cve-icon cve-icon
https://git.kernel.org/stable/c/cb87af2c19c0993f6e21f75b963a5599c5a73e76 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091548-CVE-2022-50245-57e4@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50245 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50245 cve-icon
History

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Tue, 16 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 15 Sep 2025 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free priv. But priv is still in the chdev->file_list, then list traversal may cause UAF. This fixes the following smatch warning: drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
Title rapidio: fix possible UAF when kfifo_alloc() fails
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-15T14:02:03.353Z

Updated: 2025-09-15T14:02:03.353Z

Reserved: 2025-09-15T13:58:00.972Z

Link: CVE-2022-50245

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-15T14:15:34.897

Modified: 2025-09-15T15:21:42.937

Link: CVE-2022-50245

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2022-50245 - Bugzilla