VYPR
High severity7.0NVD Advisory· Published Feb 26, 2025· Updated Aug 4, 2026

CVE-2022-49127

CVE-2022-49127

Description

In the Linux kernel, the following vulnerability has been resolved:

ref_tracker: implement use-after-free detection

Whenever ref_tracker_dir_init() is called, mark the struct ref_tracker_dir as dead.

Test the dead status from ref_tracker_alloc() and ref_tracker_free()

This should detect buggy dev_put()/dev_hold() happening too late in netdevice dismantle process.

Affected products

4
  • Linux/Kernel3 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.17,<5.17.3
    • (no CPE)
    • (no CPE)range: 5.17
  • osv-coords
    Range: >= 5.17.0, < 5.17.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.