CVE-2022-49057
MEDIUMLinux kernel - Use After Free
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: block: null_blk: end timed out poll request When poll request is timed out, it is removed from the poll list, but not completed, so the request is leaked, and never get chance to complete. Fix the issue by ending it in timeout handler.
Scores
CVSS v3
5.5
EPSS
0.0004
EPSS Percentile
11.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-401
Status
published
Affected Products (4)
linux/linux_kernel
< 5.17.4
linux/linux_kernel
linux/linux_kernel
linux/Kernel
< 5.17.4linux
Timeline
Published
Feb 26, 2025
Tracked Since
Feb 18, 2026