CVE-2022-49651

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 26, 2025
Updated: Feb 27, 2025
CWE ID 416

Summary

CVE-2022-49651 is a vulnerability affecting the Linux kernel. It involves the function 'cleanup_srcu_struct()' which currently only checks if a grace period is in progress but fails to consider one that might start imminently. This oversight could lead to a use-after-free bug, potentially resulting in arbitrary code execution or system crashes. To address this issue, the latest Linux kernel update includes a patch that adds a check for a needed but not yet started grace period in 'cleanup_srcu_struct()'.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share