ipmi: fix use after free in _ipmi_destroy_user() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: ipmi: fix use after free in _ipmi_destroy_user() The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line.
References
- https://git.kernel.org/stable/c/35ad87bfe330f7ef6a19f772223c63296d643172
- https://git.kernel.org/stable/c/d23006f2a56e11a3103de0ca8b843bf7fd7d76fc
- https://git.kernel.org/stable/c/f29d127b372e1b7662397d92341d9f7de198ff99
- https://git.kernel.org/stable/c/bfce073089cb81482521c65061835aaa6d1a6cc0
- https://git.kernel.org/stable/c/f7fde441198a9ecb130c3ccec91ee2131d6998ee
- https://git.kernel.org/stable/c/1fc9b20a7688000fcf4d7fbaa58e415a3cdda961
- https://git.kernel.org/stable/c/a92ce570c81dc0feaeb12a429b4bc65686d17967
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2022-55728
- GCVE · GCVE-0-2022-50677
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected f9d405a4bd6090ffbf3bba5e2da6b44c0e013cb3 < 35ad87bfe330f7ef6a19f772223c63296d643172 ; affected b642ced2cad496c32ae1f62b85fc395391190820 < d23006f2a56e11a3103de0ca8b843bf7fd7d76fc ; affected cbb79863fc3175ed5ac506465948b02a893a8235 < f29d127b372e1b7662397d92341d9f7de198ff99 ; affected cbb79863fc3175ed5ac506465948b02a893a8235 < bfce073089cb81482521c65061835aaa6d1a6cc0 ; affected cbb79863fc3175ed5ac506465948b02a893a8235 < f7fde441198a9ecb130c3ccec91ee2131d6998ee ; affected cbb79863fc3175ed5ac506465948b02a893a8235 < 1fc9b20a7688000fcf4d7fbaa58e415a3cdda961 |
| Linux · Linux | affected 5.5 ; unaffected 0 < 5.5 ; unaffected 4.19.270 ≤ 4.19.* ; unaffected 5.4.229 ≤ 5.4.* ; unaffected 5.10.163 ≤ 5.10.* ; unaffected 5.15.87 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |