CVE-2022-50767

fbdev: smscufx: Fix several use-after-free bugs

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fbdev: smscufx: Fix several use-after-free bugs

Several types of UAFs can occur when physically removing a USB device.

Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and

in this function, there is kref_put() that finally calls ufx_free().

This fix prevents multiple UAFs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.5th percentile
Published
2025-12-24T13:05Z
EPSS history
Timeline
  • 24 DEC 13:05Z
    fbdev: smscufx: Fix several use-after-free bugs
    cvelistv5