CVE-2022-49672

HIGH

Linux Kernel 4.15-5.18.10 Use-After-Free in tun Device Destruction

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net: tun: unlink NAPI from device on destruction Syzbot found a race between tun file and device destruction. NAPIs live in struct tun_file which can get destroyed before the netdev so we have to del them explicitly. The current code is missing deleting the NAPI if the queue was detached first.

References (6)

Core 6

Scores

CVSS v3 7.8
EPSS 0.0030
EPSS Percentile 22.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (21)
linux/Kernel 4.15.0 - 4.19.251linux
linux/Kernel 4.20.0 - 5.4.204linux
linux/Kernel 5.11.0 - 5.15.53linux
linux/Kernel 5.16.0 - 5.18.10linux
linux/Kernel 5.5.0 - 5.10.129linux
Linux/Linux < 4.15
Linux/Linux 4.15
Linux/Linux 4.19.251 - 4.19.*
Linux/Linux 5.10.129 - 5.10.*
Linux/Linux 5.15.53 - 5.15.*
... and 11 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026