{"id":"DEBIAN-CVE-2022-50542","details":"In the Linux kernel, the following vulnerability has been resolved:  media: si470x: Fix use-after-free in si470x_int_in_callback()  syzbot reported use-after-free in si470x_int_in_callback() [1].  This indicates that urb-\u003econtext, which contains struct si470x_device object, is freed when si470x_int_in_callback() is called.  The cause of this issue is that si470x_int_in_callback() is called for freed urb.  si470x_usb_driver_probe() calls si470x_start_usb(), which then calls usb_submit_urb() and si470x_start().  If si470x_start_usb() fails, si470x_usb_driver_probe() doesn't kill urb, but it just frees struct si470x_device object, as depicted below:  si470x_usb_driver_probe()   ...   si470x_start_usb()     ...     usb_submit_urb()     retval = si470x_start()     return retval   if (retval \u003c 0)     free struct si470x_device object, but don't kill urb  This patch fixes this issue by killing urb when si470x_start_usb() fails and urb is submitted.  If si470x_start_usb() fails and urb is not submitted, i.e. submitting usb fails, it just frees struct si470x_device object.","modified":"2026-09-01T16:05:35.672174875Z","published":"2025-10-07T16:15:38.557Z","upstream":["CVE-2022-50542"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-50542"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50542.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50542.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50542.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}