CVE-2022-49053

HIGH

Linux Kernel Use-After-Free in tcmu_try_get_data_page

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmu_try_get_data_page() looks up pages under cmdr_lock, but it does not take refcount properly and just returns page pointer. When tcmu_try_get_data_page() returns, the returned page may have been freed by tcmu_blocks_release(). We need to get_page() under cmdr_lock to avoid concurrent tcmu_blocks_release().

References (7)

Core 7

Scores

CVSS v3 7.8
EPSS 0.0026
EPSS Percentile 17.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (24)
linux/Kernel 4.12.0 - 4.14.276linux
linux/Kernel 4.15.0 - 4.19.239linux
linux/Kernel 4.20.0 - 5.4.190linux
linux/Kernel 5.11.0 - 5.15.35linux
linux/Kernel 5.16.0 - 5.17.4linux
linux/Kernel 5.5.0 - 5.10.112linux
Linux/Linux < 4.12
Linux/Linux 141685a39151aea95eb56562d2953e919c6c73da - a6968f7a367f128d120447360734344d5a3d5336
Linux/Linux 141685a39151aea95eb56562d2953e919c6c73da - a9564d84ed9f6ee71017d062d0d2182154294a4b
Linux/Linux 141685a39151aea95eb56562d2953e919c6c73da - aec36b98a1bbaa84bfd8299a306e4c12314af626
... and 14 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026