CVE-2022-49410

Severity CVSS v4.0:
Pending analysis
Type:
CWE-415 Double Free
Publication date:
26/02/2025
Last modified:
01/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> tracing: Fix potential double free in create_var_ref()<br /> <br /> In create_var_ref(), init_var_ref() is called to initialize the fields<br /> of variable ref_field, which is allocated in the previous function call<br /> to create_hist_field(). Function init_var_ref() allocates the<br /> corresponding fields such as ref_field-&gt;system, but frees these fields<br /> when the function encounters an error. The caller later calls<br /> destroy_hist_field() to conduct error handling, which frees the fields<br /> and the variable itself. This results in double free of the fields which<br /> are already freed in the previous function.<br /> <br /> Fix this by storing NULL to the corresponding fields when they are freed<br /> in init_var_ref().

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.17 (including) 4.19.247 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.198 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.121 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.46 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.17.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.18 (including) 5.18.3 (excluding)