CVE-2022-49921

HIGH EPSS 4.8%
Published May 1, 20251y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published May 1, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in red_enqueue() We can't use "skb" again after passing it to qdisc_enqueue(). This is basically identical to commit 2f09707d0c97 ("sch_sfb: Also store skb len before calling child enqueue").

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
4.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥4.4.163  –  <4.5
linuxlinux_kernel*≥4.7  –  <4.9.333
linuxlinux_kernel*≥4.10  –  <4.14.299
linuxlinux_kernel*≥4.15  –  <4.19.265
linuxlinux_kernel*≥4.20  –  <5.4.224
linuxlinux_kernel*≥5.5  –  <5.10.154
linuxlinux_kernel*≥5.11  –  <5.15.78
linuxlinux_kernel*≥5.16  –  <6.0.8
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any
linuxlinux_kernel6.1any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/170e5317042c302777ed6d59fdb84af9b0219d4e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/52e0429471976785c155bfbf51d80990c6cd46e2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5960b9081baca85cc7dcb14aec1de85999ea9d36
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/795afe0b9bb6c915f0299a8e309936519be01619
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8bdc2acd420c6f3dd1f1c78750ec989f02a1e2b9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a238cdcf2bdc72207c74375fc8be13ee549ca9db
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e877f8fa49fbccc63cb2df2e9179bddc695b825a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fc4b50adb400ee5ec527a04073174e8e73a139fa
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/170e5317042c302777ed6d59fdb84af9b0219d4e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/52e0429471976785c155bfbf51d80990c6cd46e2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5960b9081baca85cc7dcb14aec1de85999ea9d36
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/795afe0b9bb6c915f0299a8e309936519be01619
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8bdc2acd420c6f3dd1f1c78750ec989f02a1e2b9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a238cdcf2bdc72207c74375fc8be13ee549ca9db
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e877f8fa49fbccc63cb2df2e9179bddc695b825a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fc4b50adb400ee5ec527a04073174e8e73a139fa
    Patch