CVE-2022-50305

ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()

published September 15, 2025

CVSS
—
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()

sof_es8336_remove() calls cancel_delayed_work(). However, that

function does not wait until the work function finishes. This

means that the callback function may still be running after

the driver's remove function has finished, which would result

in a use-after-free.

Fix by calling cancel_delayed_work_sync(), which ensures that

the work is properly cancelled, no longer running, and unable

to re-schedule itself.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Published
2025-09-15T14:46Z
EPSS history
Timeline
  • 15 SEP 14:46Z
    ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
    cvelistv5