CVE-2022-49026CWE-416

CVE-2022-49026

High · published October 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

e100: Fix possible use after free in e100_xmit_prepare

In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so

e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will

resend the skb. But the skb is already freed, which will cause UAF bug

when the upper layer resends the skb.

Remove the harmful free.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.2th percentile
Weakness
CWE-416 · Use After Free
Published
2024-10-22T00:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 4.3, < 5.10.1585.10.158
linux/linux_kernel≥ 5.11, < 5.15.825.15.82
linux/linux_kernel≥ 5.16, < 6.0.126.0.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/45605c75c52c7ae7bfe902214343aabcfe5ba0ff · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9fc27d22cdb9b1fcd754599d216a8992fed280cd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b46f6144ab89d3d757ead940759c505091626a7d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b775f37d943966f6f77dca402f5a9dedce502c25 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 21 OCT 20:06Z
    e100: Fix possible use after free in e100_xmit_prepare
    cvelistv5