CVE-2022-49695

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 26, 2025
Updated: Feb 27, 2025
CWE ID 416

Summary

CVE-2022-49695 is a use-after-free vulnerability affecting the igb driver in the Linux kernel. This issue can occur when the NIC is running in XDP mode and traffic is redirected to the igb NIC while the device is being closed. The igb_clean_tx_ring routine contains the bug, leading to memory being accessed after it has been freed. This can result in a kernel panic and potentially allow an attacker to execute arbitrary code. The vulnerability was identified during a kernel trace, which revealed the involved functions and their call stacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share