CVE-2022-49388

Summary

CVE-2022-49388 is a use-after-free vulnerability affecting the Linux kernel. In the function "ubi_create_volume()," there is a mistake in error handling that leads to an use-after-free condition on the 'eba_tbl' variable. Specifically, after freeing 'eba_tbl' in the error path, the code still attempts to use it during "vol_release." This issue has been addressed by removing the redundant 'eba_tbl' freeing, preventing potential memory corruption and potential attacks. For a reproducer of this vulnerability, refer to the provided link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.