CVE-2022-49388

Summary

CVE-2022-49388 is a use-after-free vulnerability affecting the Linux kernel. In the function ubi_create_volume(), there is a failure to properly handle the allocation of 'eba_tbl' when volume creation fails. This results in 'eba_tbl' being accessed after it has been freed, leading to a use-after-free condition. The issue can be mitigated by removing the redundant 'eba_tbl' releasing and has been resolved in recent kernel updates. Users are advised to apply the necessary patches to prevent potential exploitation. [Source: CVE-2022-49388 description]

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.