CVE-2022-49798
MEDIUMLinux Kernel 5.15-5.15.79, 5.16-6.0.9 - Race Condition in Event Trigger Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race where eprobes can be called before the event The flag that tells the event to call its triggers after reading the event is set for eprobes after the eprobe is enabled. This leads to a race where the eprobe may be triggered at the beginning of the event where the record information is NULL. The eprobe then dereferences the NULL record causing a NULL kernel pointer bug. Test for a NULL record to keep this from happening.
References (3)
Core 3
Scores
CVSS v3
4.7
EPSS
0.0011
EPSS Percentile
1.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-362
Status
published
Products (12)
linux/Kernel
5.15.0 - 5.15.80linux
linux/Kernel
5.16.0 - 6.0.10linux
Linux/Linux
< 5.15
Linux/Linux
5.15
Linux/Linux
5.15.80 - 5.15.*
Linux/Linux
6.0.10 - 6.0.*
Linux/Linux
6.1
Linux/Linux
7491e2c442781a1860181adb5ab472a52075f393 - 7291dec4f2d17a2d3fd1f789fb41e58476539f21
Linux/Linux
7491e2c442781a1860181adb5ab472a52075f393 - 73f5191467ffe3af82f27fe0ea6a8c2fac724d3f
Linux/Linux
7491e2c442781a1860181adb5ab472a52075f393 - 94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26
... and 2 more
Published
May 01, 2025
Tracked Since
Feb 18, 2026