CVE-2022-49798

tracing: Fix race where eprobes can be called before the event

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix race where eprobes can be called before the event

The flag that tells the event to call its triggers after reading the event

is set for eprobes after the eprobe is enabled. This leads to a race where

the eprobe may be triggered at the beginning of the event where the record

information is NULL. The eprobe then dereferences the NULL record causing

a NULL kernel pointer bug.

Test for a NULL record to keep this from happening.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Published
2025-05-01T14:09Z
EPSS history
Timeline
  • 01 MAY 14:09Z
    tracing: Fix race where eprobes can be called before the event
    cvelistv5