Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49921

net: sched: Fix use after free in red_enqueue()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in red_enqueue() We can't use "skb" again after passing it to qdisc_enqueue(). This is basically identical to commit 2f09707d0c97 ("sch_sfb: Also store skb len before calling child enqueue").

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < 795afe0b9bb6c915f0299a8e309936519be01619affected
  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < a238cdcf2bdc72207c74375fc8be13ee549ca9dbaffected
  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < e877f8fa49fbccc63cb2df2e9179bddc695b825aaffected
  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < 52e0429471976785c155bfbf51d80990c6cd46e2affected
  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < 5960b9081baca85cc7dcb14aec1de85999ea9d36affected
  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < fc4b50adb400ee5ec527a04073174e8e73a139faaffected
  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < 170e5317042c302777ed6d59fdb84af9b0219d4eaffected
  • d7f4f332f082c4d4ba53582f902ed6b44fd6f45e to < 8bdc2acd420c6f3dd1f1c78750ec989f02a1e2b9affected
  • ab0b3b9dbf559a5633d460e748144697bd2d3aa3affected
  • 4.4.163 to < 4.5affected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 4.9.333 to ≤ 4.9.*unaffected
  • 4.14.299 to ≤ 4.14.*unaffected
  • 4.19.265 to ≤ 4.19.*unaffected
  • 5.4.224 to ≤ 5.4.*unaffected
  • 5.10.154 to ≤ 5.10.*unaffected
  • 5.15.78 to ≤ 5.15.*unaffected
  • 6.0.8 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References