CVE-2022-49127

Summary

CVE-2022-49127 is a vulnerability in the Linux kernel that has been addressed. The issue lies in the ref_tracker module, where the struct ref_tracker_dir is not properly managed. Specifically, whenever ref_tracker_dir_init() is called, the struct is marked as dead. However, if dev_put() or dev_hold() are called too late during the netdevice dismantle process, a use-after-free condition may occur, leading to potential memory corruption and security vulnerabilities. This issue has been resolved by implementing use-after-free detection in the Linux kernel.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.