In the Linux kernel, the following vulnerability has been resolved:

rapidio: fix possible UAF when kfifo_alloc() fails

If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free
priv. But priv is still in the chdev->file_list, then list traversal
may cause UAF. This fixes the following smatch warning:

drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/02d7d89f816951e0862147d751b1150d67aaebdd cve-icon cve-icon
https://git.kernel.org/stable/c/2a6c75adf8192f07ddcdd4a1a13488c890a73919 cve-icon cve-icon
https://git.kernel.org/stable/c/2ba06e57f933f0eac242e8b389433da1cc00d4d5 cve-icon cve-icon
https://git.kernel.org/stable/c/2dfd60724d271a6ab99f93f40f38f2ced1ddbb87 cve-icon cve-icon
https://git.kernel.org/stable/c/2f5cc7fd73fd6253cc71214f0dd499cc62feb469 cve-icon cve-icon
https://git.kernel.org/stable/c/311b488405ac45af46756b1c8f1d27007b68b07e cve-icon cve-icon
https://git.kernel.org/stable/c/5ee850645e42f541ce1ea8130c2b27cc495f965c cve-icon cve-icon
https://git.kernel.org/stable/c/a253dde0403a153075ffb254f6f7b2635e49e97a cve-icon cve-icon
https://git.kernel.org/stable/c/cb87af2c19c0993f6e21f75b963a5599c5a73e76 cve-icon cve-icon
History

Mon, 15 Sep 2025 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free priv. But priv is still in the chdev->file_list, then list traversal may cause UAF. This fixes the following smatch warning: drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
Title rapidio: fix possible UAF when kfifo_alloc() fails
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-09-15T14:02:03.353Z

Reserved: 2025-09-15T13:58:00.972Z

Link: CVE-2022-50245

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-15T14:15:34.897

Modified: 2025-09-15T15:21:42.937

Link: CVE-2022-50245

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.