CVE-2022-1734

 

Published at: - 18-05-2022 07:15

Last modified: - 26-10-2022 01:44

Total changes: - 9

Description

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/torvalds/linux/commit/d270453a0d9ec10bb8a802a142fb1b3601a83098
• [oss-security] 20220605 Re: Linux kernel: UAF, null-ptr-deref and double-free vulnerabilities in nfcmrvl module-Exploit, Mailing List, Patch, Third Party Advisory
• [oss-security] 20220609 Re: Linux kernel: UAF, null-ptr-deref and double-free vulnerabilities in nfcmrvl module-Exploit, Mailing List, Patch, Third Party Advisory
• [debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update-Mailing List, Third Party Advisory
• DSA-5173-Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220707-0007/

 

Keywords

NVD

 

CVE-2022-1734

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures