cve-2022-49811
Vulnerability from cvelistv5
Published
2025-05-01 14:09
Modified
2025-05-01 14:09
Severity ?
EPSS score ?
Summary
drbd: use after free in drbd_create_device()
References
{ "containers": { "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Linux", "programFiles": [ "drivers/block/drbd/drbd_main.c" ], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [ { "lessThan": "fc1897f16ebcfd22364f2afcc27f53a740f3bc7a", "status": "affected", "version": "b6f85ef9538b2111a8ba0bbfae9aaebabfc94961", "versionType": "git" }, { "lessThan": "bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1", "status": "affected", "version": "b6f85ef9538b2111a8ba0bbfae9aaebabfc94961", "versionType": "git" }, { "lessThan": "813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5", "status": "affected", "version": "b6f85ef9538b2111a8ba0bbfae9aaebabfc94961", "versionType": "git" }, { "lessThan": "9ed51414aef6e59e832e2960f10766dce2d5b1a1", "status": "affected", "version": "b6f85ef9538b2111a8ba0bbfae9aaebabfc94961", "versionType": "git" }, { "lessThan": "7d93417d596402ddd46bd76c721f205d09d0d025", "status": "affected", "version": "b6f85ef9538b2111a8ba0bbfae9aaebabfc94961", "versionType": "git" }, { "lessThan": "c2a00b149836d60c222930bbea6b2139caf34d4f", "status": "affected", "version": "b6f85ef9538b2111a8ba0bbfae9aaebabfc94961", "versionType": "git" }, { "lessThan": "a7a1598189228b5007369a9622ccdf587be0730f", "status": "affected", "version": "b6f85ef9538b2111a8ba0bbfae9aaebabfc94961", "versionType": "git" } ] }, { "defaultStatus": "affected", "product": "Linux", "programFiles": [ "drivers/block/drbd/drbd_main.c" ], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [ { "status": "affected", "version": "3.15" }, { "lessThan": "3.15", "status": "unaffected", "version": "0", "versionType": "semver" }, { "lessThanOrEqual": "4.14.*", "status": "unaffected", "version": "4.14.300", "versionType": "semver" }, { "lessThanOrEqual": "4.19.*", "status": "unaffected", "version": "4.19.267", "versionType": "semver" }, { "lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.225", "versionType": "semver" }, { "lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.156", "versionType": "semver" }, { "lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.80", "versionType": "semver" }, { "lessThanOrEqual": "6.0.*", "status": "unaffected", "version": "6.0.10", "versionType": "semver" }, { "lessThanOrEqual": "*", "status": "unaffected", "version": "6.1", "versionType": "original_commit_for_fix" } ] } ], "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrbd: use after free in drbd_create_device()\n\nThe drbd_destroy_connection() frees the \"connection\" so use the _safe()\niterator to prevent a use after free." } ], "providerMetadata": { "dateUpdated": "2025-05-01T14:09:36.098Z", "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux" }, "references": [ { "url": "https://git.kernel.org/stable/c/fc1897f16ebcfd22364f2afcc27f53a740f3bc7a" }, { "url": "https://git.kernel.org/stable/c/bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1" }, { "url": "https://git.kernel.org/stable/c/813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5" }, { "url": "https://git.kernel.org/stable/c/9ed51414aef6e59e832e2960f10766dce2d5b1a1" }, { "url": "https://git.kernel.org/stable/c/7d93417d596402ddd46bd76c721f205d09d0d025" }, { "url": "https://git.kernel.org/stable/c/c2a00b149836d60c222930bbea6b2139caf34d4f" }, { "url": "https://git.kernel.org/stable/c/a7a1598189228b5007369a9622ccdf587be0730f" } ], "title": "drbd: use after free in drbd_create_device()", "x_generator": { "engine": "bippy-1.1.0" } } }, "cveMetadata": { "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "assignerShortName": "Linux", "cveId": "CVE-2022-49811", "datePublished": "2025-05-01T14:09:36.098Z", "dateReserved": "2025-05-01T14:05:17.226Z", "dateUpdated": "2025-05-01T14:09:36.098Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2022-49811\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-05-01T15:16:04.450\",\"lastModified\":\"2025-05-01T15:16:04.450\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrbd: use after free in drbd_create_device()\\n\\nThe drbd_destroy_connection() frees the \\\"connection\\\" so use the _safe()\\niterator to prevent a use after free.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/7d93417d596402ddd46bd76c721f205d09d0d025\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9ed51414aef6e59e832e2960f10766dce2d5b1a1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a7a1598189228b5007369a9622ccdf587be0730f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c2a00b149836d60c222930bbea6b2139caf34d4f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fc1897f16ebcfd22364f2afcc27f53a740f3bc7a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}" } }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.