CVE-2022-49388

HIGH EPSS 19.4%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_create_volume: Fix use-after-free when volume creation failed There is an use-after-free problem for 'eba_tbl' in ubi_create_volume()'s error handling path: ubi_eba_replace_table(vol, eba_tbl) vol->eba_tbl = tbl out_mapping: ubi_eba_destroy_table(eba_tbl) // Free 'eba_tbl' out_unlock: put_device(&vol->dev) vol_release kfree(tbl->entries) // UAF Fix it by removing redundant 'eba_tbl' releasing. Fetch a reproducer in [Link].

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
19.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥4.12  –  <4.14.283
linuxlinux_kernel*≥4.15  –  <4.19.247
linuxlinux_kernel*≥4.20  –  <5.4.198
linuxlinux_kernel*≥5.5  –  <5.10.122
linuxlinux_kernel*≥5.11  –  <5.15.47
linuxlinux_kernel*≥5.16  –  <5.17.15
linuxlinux_kernel*≥5.18  –  <5.18.4

References 8

  • git.kernel.org https://git.kernel.org/stable/c/1174ab8ba36a48025b68b5ff1085000b1e510217
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/25ff1e3a1351c0d936dd1ac2f9e58231ea1510c9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5ff2514e4fb55dcf3d88294686040ca73ea0c1a2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6d8d3f68cbecfd31925796f0fb668eb21ab06734
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8302620aeb940f386817321d272b12411ae7d39f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8c03a1c21d72210f81cb369cc528e3fde4b45411
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/abb67043060f2bf4c03d7c3debb9ae980e2b6db3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e27ecf325e51abd06aaefba57a6322a46fa4178b
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1174ab8ba36a48025b68b5ff1085000b1e510217
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/25ff1e3a1351c0d936dd1ac2f9e58231ea1510c9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5ff2514e4fb55dcf3d88294686040ca73ea0c1a2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6d8d3f68cbecfd31925796f0fb668eb21ab06734
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8302620aeb940f386817321d272b12411ae7d39f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8c03a1c21d72210f81cb369cc528e3fde4b45411
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/abb67043060f2bf4c03d7c3debb9ae980e2b6db3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e27ecf325e51abd06aaefba57a6322a46fa4178b
    Patch