CVEvulnerability
CVE-2022-50305
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-09-15
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
sof_es8336_remove() calls cancel_delayed_work(). However, that
function does not wait until the work function finishes. This
means that the callback function may still be running after
the driver's remove function has finished, which would result
in a use-after-free.
Fix by calling cancel_delayed_work_sync(), which ensures that
the work is properly cancelled, no longer running, and unable
to re-schedule itself.
Affected configurations
• linux linux kernel (>= 6.0.11 < 6.0.16)
• linux linux kernel (>= 6.1.1 < 6.1.2)
• linux linux kernel 6.1
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness