CVE-2022-49026

HIGH

Linux Kernel 4.3-5.10.158 5.11.0-5.15.82 5.16.0-6.0.12 - Use-After-Free in e100_xmit_prepare

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will resend the skb. But the skb is already freed, which will cause UAF bug when the upper layer resends the skb. Remove the harmful free.

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.0024
EPSS Percentile 14.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (15)
linux/Kernel 4.3.0 - 5.10.158linux
linux/Kernel 5.11.0 - 5.15.82linux
linux/Kernel 5.16.0 - 6.0.12linux
Linux/Linux < 4.3
Linux/Linux 4.3
Linux/Linux 5.10.158 - 5.10.*
Linux/Linux 5.15.82 - 5.15.*
Linux/Linux 5e5d49422dfb035ca9e280cd61d434095c151272 - 45605c75c52c7ae7bfe902214343aabcfe5ba0ff
Linux/Linux 5e5d49422dfb035ca9e280cd61d434095c151272 - 9fc27d22cdb9b1fcd754599d216a8992fed280cd
Linux/Linux 5e5d49422dfb035ca9e280cd61d434095c151272 - b46f6144ab89d3d757ead940759c505091626a7d
... and 5 more
Published Oct 21, 2024
Tracked Since Feb 18, 2026