https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:27:12 +0000 https://db.gcve.eu/vuln/cve-2022-50005 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout</p> <p>When the pn532 uart device is detaching, the pn532_uart_remove() is called. But there are no functions in pn532_uart_remove() that could delete the cmd_timeout timer, which will cause use-after-free bugs. The process is shown below:</p> <p>(thread 1) | (thread 2) | pn532_uart_send_frame pn532_uart_remove | mod_timer(&amp;pn532-&gt;cmd_timeout,...) ... | (wait a time) kfree(pn532) //FREE | pn532_cmd_timeout | pn532_uart_send_frame | pn532-&gt;... //USE</p> <p>This patch adds del_timer_sync() in pn532_uart_remove() in order to prevent the use-after-free bugs. What&#39;s more, the pn53x_unregister_nfc() is well synchronized, it sets nfc_dev-&gt;shutting_down to true and there are no syscalls could restart the cmd_timeout timer.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout</p> <p>When the pn532 uart device is detaching, the pn532_uart_remove() is called. But there are no functions in pn532_uart_remove() that could delete the cmd_timeout timer, which will cause use-after-free bugs. The process is shown below:</p> <p>(thread 1) | (thread 2) | pn532_uart_send_frame pn532_uart_remove | mod_timer(&amp;pn532-&gt;cmd_timeout,...) ... | (wait a time) kfree(pn532) //FREE | pn532_cmd_timeout | pn532_uart_send_frame | pn532-&gt;... //USE</p> <p>This patch adds del_timer_sync() in pn532_uart_remove() in order to prevent the use-after-free bugs. What&#39;s more, the pn53x_unregister_nfc() is well synchronized, it sets nfc_dev-&gt;shutting_down to true and there are no syscalls could restart the cmd_timeout timer.</p> https://db.gcve.eu/vuln/cve-2022-50005