CVE-2022-49410
Last modified
CVE-2022-49410 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in create_var_ref() In create_var_ref(), init_var_ref() is called to initialize the fields of variable ref_field, which is allocated in the previous function call to create_hist_field(). Function init_var_ref() allocates the corresponding fields such as ref_field->system, but frees these fields when the function encounters an error. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in create_var_ref() In create_var_ref(), init_var_ref() is called to initialize the fields of variable ref_field, which is allocated in the previous function call to create_hist_field(). Function init_var_ref() allocates the corresponding fields such as ref_field->system, but frees these fields when the function encounters an error. The caller later calls destroy_hist_field() to conduct error handling, which frees the fields and the variable itself. This results in double free of the fields which are already freed in the previous function. Fix this by storing NULL to the corresponding fields when they are freed in init_var_ref().
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.17, < 4.19.247 |
| Linux | Linux Kernel | >= 4.20, < 5.4.198 |
| Linux | Linux Kernel | >= 5.5, < 5.10.121 |
| Linux | Linux Kernel | >= 5.11, < 5.15.46 |
| Linux | Linux Kernel | >= 5.16, < 5.17.14 |
| Linux | Linux Kernel | >= 5.18, < 5.18.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-49410?
How severe is CVE-2022-49410?
How do I fix CVE-2022-49410?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-49405In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2022-49406In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2022-49407In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2022-49408In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2022-49409In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2022-4941The WCFM Membership plugin for WordPress is vulnerable to Cr…8.8
- CVE-2022-49411In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2022-49412In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2022-49413In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2022-49414In the Linux kernel, the following vulnerability has been re…4.7
- CVE-2022-49415In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2022-49416In the Linux kernel, the following vulnerability has been re…8.8
Are you affected by CVE-2022-49410?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST