Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2022-49127

ref_tracker: implement use-after-free detection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ref_tracker: implement use-after-free detection Whenever ref_tracker_dir_init() is called, mark the struct ref_tracker_dir as dead. Test the dead status from ref_tracker_alloc() and ref_tracker_free() This should detect buggy dev_put()/dev_hold() happening too late in netdevice dismantle process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4e66934eaadc83b27ada8d42b60894018f3bfabf to < 3743c9de303fa36c2e2ca2522ab280c52bcafbd2affected
  • 4e66934eaadc83b27ada8d42b60894018f3bfabf to < e3ececfe668facd87d920b608349a32607060e66affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 5.17.3 to ≤ 5.17.*unaffected
  • 5.18 to ≤ *unaffected

References