Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2022-49014: Linux kernel memory error in tun_detach can cause crashes
CVE-2022-49014 · published 2 years ago
Summary
A coding mistake in the Linux kernel’s tun device driver may let the system use memory that has already been released, which can lead to crashes or unstable behavior. This issue affects several Linux kernel packages, including standard, HWE, AWS, Azure, and GCP variants. Install the latest kernel updates from your Linux distribution to resolve the problem.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1097.105~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1104.110~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1101.110~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-144.161~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1045.50~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1094.103~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1081.92~18.04.1.
- Update canonical linux-bluefield to version 5.15.0-1014.16.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1022.27.
- Update canonical linux-realtime to version 5.15.0-1033.36.
- Update canonical linux to version 5.4.0-144.161.
- Update canonical linux-aws to version 5.4.0-1097.105.
- Update canonical linux-aws-5.15 to version 5.15.0-1031.35~20.04.1.
- Update canonical linux-azure to version 5.4.0-1104.110.
- Update canonical linux-azure-5.15 to version 5.15.0-1034.41~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1059.65.
- Update canonical linux-gcp to version 5.4.0-1101.110.
- Update canonical linux-gcp-5.15 to version 5.15.0-1030.37~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1065.69.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1016.21~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-67.74~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1045.50.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1026.31~20.04.1.
- Update canonical linux-iot to version 5.4.0-1013.15.
- Update canonical linux-kvm to version 5.4.0-1087.93.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-67.74~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1014.14~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1094.103.
- Update canonical linux-oracle-5.15 to version 5.15.0-1030.36~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1081.92.
- Update canonical linux-riscv-5.15 to version 5.15.0-1030.34~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1022.26.
- Update canonical linux-aws-fips to version 5.4.0-1099.107+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1104.110+fips1.
- Update canonical linux-fips to version 5.4.0-1073.82.
- Update canonical linux-gcp-fips to version 5.4.0-1101.110+fips1.
- Update canonical linux to version 5.15.0-67.74.
- Update canonical linux-aws to version 5.15.0-1031.35.
- Update canonical linux-azure to version 5.15.0-1034.41.
- Update canonical linux-azure-fde to version 5.15.0-1034.41.1.
- Update canonical linux-gcp to version 5.15.0-1030.37.
- Update canonical linux-gke to version 5.15.0-1028.33.
- Update canonical linux-gkeop to version 5.15.0-1016.21.
- Update canonical linux-ibm to version 5.15.0-1026.29.
- Update canonical linux-intel-iotg to version 5.15.0-1026.31.
- Update canonical linux-kvm to version 5.15.0-1029.34.
- Update canonical linux-lowlatency to version 5.15.0-67.74.
- Update canonical linux-nvidia to version 5.15.0-1023.23.
- Update canonical linux-oracle to version 5.15.0-1030.36.
- Update canonical linux-raspi to version 5.15.0-1025.27.
- Update debian linux to version 6.0.12-1.
- Update linux kernel to version 6.0.12.
- Update linux linux to version 1f23f1890d91812c35d32eab1b49621b6d32dc7b or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 4.17, < 4.19.268 >= 4.20, < 5.4.226 >= 5.5, < 5.10.158 >= 5.11, < 5.15.82 >= 5.16, < 6.0.12 6.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1097.105~18.04.1 Fix: upgrade to 5.4.0-1097.105~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1104.110~18.04.1 Fix: upgrade to 5.4.0-1104.110~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1101.110~18.04.1 Fix: upgrade to 5.4.0-1101.110~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-144.161~18.04.1 Fix: upgrade to 5.4.0-144.161~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1045.50~18.04.1 Fix: upgrade to 5.4.0-1045.50~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1094.103~18.04.1 Fix: upgrade to 5.4.0-1094.103~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1081.92~18.04.1 Fix: upgrade to 5.4.0-1081.92~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1014.16 Fix: upgrade to 5.15.0-1014.16
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1022.27 Fix: upgrade to 5.15.0-1022.27
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1033.36 Fix: upgrade to 5.15.0-1033.36
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| – | linux | linux |
< 1f23f1890d91812c35d32eab1b49621b6d32dc7b 4.17 |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-144.161 Fix: upgrade to 5.4.0-144.161
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1097.105 Fix: upgrade to 5.4.0-1097.105
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1031.35~20.04.1 Fix: upgrade to 5.15.0-1031.35~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1104.110 Fix: upgrade to 5.4.0-1104.110
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1034.41~20.04.1 Fix: upgrade to 5.15.0-1034.41~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1059.65 Fix: upgrade to 5.4.0-1059.65
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1101.110 Fix: upgrade to 5.4.0-1101.110
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1030.37~20.04.1 Fix: upgrade to 5.15.0-1030.37~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1065.69 Fix: upgrade to 5.4.0-1065.69
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1016.21~20.04.1 Fix: upgrade to 5.15.0-1016.21~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-67.74~20.04.1 Fix: upgrade to 5.15.0-67.74~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1045.50 Fix: upgrade to 5.4.0-1045.50
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1026.31~20.04.1 Fix: upgrade to 5.15.0-1026.31~20.04.1
|
Showing 50 of 135. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1013.15 Fix: upgrade to 5.4.0-1013.15
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1087.93 Fix: upgrade to 5.4.0-1087.93
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-67.74~20.04.1 Fix: upgrade to 5.15.0-67.74~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1014.14~20.04.1 Fix: upgrade to 5.15.0-1014.14~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1094.103 Fix: upgrade to 5.4.0-1094.103
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1030.36~20.04.1 Fix: upgrade to 5.15.0-1030.36~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1081.92 Fix: upgrade to 5.4.0-1081.92
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1030.34~20.04.1 Fix: upgrade to 5.15.0-1030.34~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1022.26 Fix: upgrade to 5.4.0-1022.26
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1099.107+fips1 Fix: upgrade to 5.4.0-1099.107+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1104.110+fips1 Fix: upgrade to 5.4.0-1104.110+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1073.82 Fix: upgrade to 5.4.0-1073.82
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1101.110+fips1 Fix: upgrade to 5.4.0-1101.110+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-67.74 Fix: upgrade to 5.15.0-67.74
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1031.35 Fix: upgrade to 5.15.0-1031.35
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1034.41 Fix: upgrade to 5.15.0-1034.41
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1034.41.1 Fix: upgrade to 5.15.0-1034.41.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1030.37 Fix: upgrade to 5.15.0-1030.37
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1028.33 Fix: upgrade to 5.15.0-1028.33
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1016.21 Fix: upgrade to 5.15.0-1016.21
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1026.29 Fix: upgrade to 5.15.0-1026.29
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1026.31 Fix: upgrade to 5.15.0-1026.31
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1029.34 Fix: upgrade to 5.15.0-1029.34
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-67.74 Fix: upgrade to 5.15.0-67.74
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1023.23 Fix: upgrade to 5.15.0-1023.23
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1030.36 Fix: upgrade to 5.15.0-1030.36
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1025.27 Fix: upgrade to 5.15.0-1025.27
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Debian:12 | debian | linux |
< 6.0.12-1 Fix: upgrade to 6.0.12-1
|
| Linux | linux | kernel |
>= 5.16.0, < 6.0.12 Fix: upgrade to 6.0.12
|
Original advisory text
net: tun: Fix use-after-free in tun_detach()
In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tun_detach() syzbot reported use-after-free in tun_detach() [1]. This causes call trace like below: ================================================================== BUG: KASAN: use-after-free in notifier_call_chain+0x1ee/0x200 kernel/notifier.c:75 Read of size 8 at addr ffff88807324e2a8 by task syz-executor.0/3673 CPU: 0 PID: 3673 Comm: syz-executor.0 Not tainted 6.1.0-rc5-syzkaller-00044-gcc675d22e422 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:284 [inline] print_report+0x15e/0x461 mm/kasan/report.c:395 kasan_report+0xbf/0x1f0 mm/kasan/report.c:495 notifier_call_chain+0x1ee/0x200 kernel/notifier.c:75 call_netdevice_notifiers_info+0x86/0x130 net/core/dev.c:1942 call_netdevice_notifiers_extack net/core/dev.c:1983 [inline] call_netdevice_notifiers net/core/dev.c:1997 [inline] netdev_wait_allrefs_any net/core/dev.c:10237 [inline] netdev_run_todo+0xbc6/0x1100 net/core/dev.c:10351 tun_detach drivers/net/tun.c:704 [inline] tun_chr_close+0xe4/0x190 drivers/net/tun.c:3467 __fput+0x27c/0xa90 fs/file_table.c:320 task_work_run+0x16f/0x270 kernel/task_work.c:179 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0xb3d/0x2a30 kernel/exit.c:820 do_group_exit+0xd4/0x2a0 kernel/exit.c:950 get_signal+0x21b1/0x2440 kernel/signal.c:2858 arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd The cause of the issue is that sock_put() from __tun_detach() drops last reference count for struct net, and then notifier_call_chain() from netdev_state_change() accesses that struct net. This patch fixes the issue by calling sock_put() from tun_detach() after all necessary accesses for the struct net has done.
References
- https://git.kernel.org/stable/c/04b995e963229501401810dab89dc73e7f12d054 URL
- https://git.kernel.org/stable/c/16c244bc65d1175775325ec0489a5a5c830e02c7 URL
- https://ubuntu.com/security/CVE-2022-49014 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49014 Third Party Advisory
- https://git.kernel.org/linus/5daadc86f27ea4d691e2131c04310d0418c6cd12 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49014 Vendor Advisory
- https://git.kernel.org/stable/c/1f23f1890d91812c35d32eab1b49621b6d32dc7b URL
- https://git.kernel.org/stable/c/4cde8da2d814a3b7b176db81922d4ddaad7c0f0e URL
- https://git.kernel.org/stable/c/5daadc86f27ea4d691e2131c04310d0418c6cd12 URL
- https://git.kernel.org/stable/c/5f442e1d403e0496bacb74a58e2be7f500695e6f URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49014... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49014 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-416Use After Free
Timeline
Published21 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
UBUNTU-CVE-2022-49014 · OSV
CVE-2022-49014 · NVD
CVE-2022-49014 · MITRE
DEBIAN-CVE-2022-49014 · OSV
CVE-2022-49014 · OSV
Track software like this
Free during beta