https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 04:56:51 +0000 https://vulnerability.circl.lu/vuln/cve-2022-50229 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: bcd2000: Fix a UAF bug on the error path of probing</p> <p>When the driver fails in snd_card_register() at probe time, it will free the &#39;bcd2k-&gt;midi_out_urb&#39; before killing it, which may cause a UAF bug.</p> <p>The following log can reveal it:</p> <p>[ 50.727020] BUG: KASAN: use-after-free in bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000] [ 50.727623] Read of size 8 at addr ffff88810fab0e88 by task swapper/4/0 [ 50.729530] Call Trace: [ 50.732899] bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000]</p> <p>Fix this by adding usb_kill_urb() before usb_free_urb().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: bcd2000: Fix a UAF bug on the error path of probing</p> <p>When the driver fails in snd_card_register() at probe time, it will free the &#39;bcd2k-&gt;midi_out_urb&#39; before killing it, which may cause a UAF bug.</p> <p>The following log can reveal it:</p> <p>[ 50.727020] BUG: KASAN: use-after-free in bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000] [ 50.727623] Read of size 8 at addr ffff88810fab0e88 by task swapper/4/0 [ 50.729530] Call Trace: [ 50.732899] bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000]</p> <p>Fix this by adding usb_kill_urb() before usb_free_urb().</p> https://vulnerability.circl.lu/vuln/cve-2022-50229