CVE-2022-49057

MEDIUM

Linux kernel - Use After Free

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: block: null_blk: end timed out poll request When poll request is timed out, it is removed from the poll list, but not completed, so the request is leaked, and never get chance to complete. Fix the issue by ending it in timeout handler.

Scores

CVSS v3 5.5
EPSS 0.0004
EPSS Percentile 11.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-401
Status published

Affected Products (4)

linux/linux_kernel < 5.17.4
linux/linux_kernel
linux/linux_kernel
linux/Kernel < 5.17.4linux

Timeline

Published Feb 26, 2025
Tracked Since Feb 18, 2026