7.8

CVE-2022-49015

net: hsr: Fix potential use-after-free

In the Linux kernel, the following vulnerability has been resolved:

net: hsr: Fix potential use-after-free

The skb is delivered to netif_rx() which may free it, after calling this,
dereferencing skb may trigger use-after-free.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.13 < 4.9.335
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.301
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.268
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.226
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.158
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.82
Linux ≫ Linux Kernel Version >= 5.16 < 6.0.12
Linux ≫ Linux Kernel Version6.1 Updaterc1
Linux ≫ Linux Kernel Version6.1 Updaterc2
Linux ≫ Linux Kernel Version6.1 Updaterc3
Linux ≫ Linux Kernel Version6.1 Updaterc4
Linux ≫ Linux Kernel Version6.1 Updaterc5
Linux ≫ Linux Kernel Version6.1 Updaterc6
Linux ≫ Linux Kernel Version6.1 Updaterc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.161
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://git.kernel.org/stable/c/4b351609af4fdbc23f79ab2b12748f4403ea9af4
Patch
https://git.kernel.org/stable/c/53a62c5efe91665f7a41fad0f888a96f94dc59eb
Patch
https://git.kernel.org/stable/c/7ca81a161e406834a1fdc405fc83a572bd14b8d9
Patch
https://git.kernel.org/stable/c/7e177d32442b7ed08a9fa61b61724abc548cb248
Patch
https://git.kernel.org/stable/c/8393ce5040803666bfa26a3a7bf41e44fab0ace9
Patch
https://git.kernel.org/stable/c/b35d899854d5d5d58eb7d7e7c0f61afc60d3a9e9
Patch
https://git.kernel.org/stable/c/dca370e575d9b6c983f5015e8dc035e23e219ee6
Patch
https://git.kernel.org/stable/c/f3add2b8cf620966de3ebfa07679ca12d33ec26f
Patch