CVE-2022-49795

MEDIUM

Linux Kernel 5.18-5.18 - Use-After-Free in rethook_alloc

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethook_alloc() In rethook_alloc(), the variable rh is not freed or passed out if handler is NULL, which could lead to a memleak, fix it. [Masami: Add "rethook:" tag to the title.] Acke-by: Masami Hiramatsu (Google) <[email protected]>

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/cbc5d1f9a8cc40ba2bc6779b36d2ea1f65bc027c

Patch

https://git.kernel.org/stable/c/0a1ebe35cb3b7aa1f4b26b37e2a0b9ae68dc4ffb

Scores

CVSS v3 5.5

EPSS 0.0014

EPSS Percentile 3.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-401

Status published

Products (9)

linux/Kernel 5.18.0 - 6.0.10linux

Linux/Linux < 5.18

Linux/Linux 5.18

Linux/Linux 54ecbe6f1ed5138c895bdff55608cf502755b20e - 0a1ebe35cb3b7aa1f4b26b37e2a0b9ae68dc4ffb

Linux/Linux 54ecbe6f1ed5138c895bdff55608cf502755b20e - cbc5d1f9a8cc40ba2bc6779b36d2ea1f65bc027c

Linux/Linux 6.0.10 - 6.0.*

Linux/Linux 6.1

linux/linux_kernel 6.1 rc1 (5 CPE variants)

linux/linux_kernel 5.18 - 6.0.10

Published May 01, 2025

Tracked Since Feb 18, 2026