【OLK-5.10】CVE-2022-4095

【严重程度】一般
【特性】驱动
【重现类型】有条件必然重现
【定位分析】

_Read/Write_MACREG 回调为 NULL，因此 read/write_macreg_hdl()

函数会释放“pcmd”指针，在函数r8712_cmd_thread会导致pcmd指针在free之后使用。

bugzilla: 188045

【影响评估及测试建议】

r8712_cmd_thread可能在pcmd释放后访问其成员数据，导致触发use-after-free，可能导致允许攻击者发起本地拒绝服务攻击并获得提权

【对外部影响描述】

无

Hi ***zhixiuzhou***, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at **[Here](https://gitee.com/openeuler/community/blob/master/en/sig-infrastructure/command.md)**.
If you have any questions, please contact the SIG: [Kernel](https://gitee.com/openeuler/community/tree/master/sig/Kernel), and any of the maintainers: @yangyingliang , @gatieme , @jiaoff , @zhengzengkai , @LiuYongQiang0816 , @wangxiongfeng , @kevinzhu1 , @jentlestea , @lujialin2 , @wuxu_buque , @xukuohai , @lengchao , @alvin-ling , @yuzenghui , @juntianlinux , @chenguangli , @gasonchen , @whoisxxx , @koulihong , @kailiu42 , @hanjun-guo , @woqidaideshi , @chiqijun , @wkfxxx , @thundertown , @guohaocs2c , @kylin-mayukun , @oskernel0719 , @liuxinux , @newbeats , @zhujianwei001 , @zhenpengzheng , @SuperSix173 , @colyli , @zhangyi089 , @htforge , @qiuuuuu , @yuehaibing_planb , @haochengxie , @guzitao , @CTC-XiboWang , @Hongchen_Zhang , @chenwei_kernel , @x56Jason , @xiexiuqi

GVP openEuler/kernel

内容风险标识

评论 (1)

GVPopenEuler/kernel

内容风险标识