CVE-2022-49798

MEDIUM

Linux Kernel 5.15-5.15.79, 5.16-6.0.9 - Race Condition in Event Trigger Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race where eprobes can be called before the event The flag that tells the event to call its triggers after reading the event is set for eprobes after the eprobe is enabled. This leads to a race where the eprobe may be triggered at the beginning of the event where the record information is NULL. The eprobe then dereferences the NULL record causing a NULL kernel pointer bug. Test for a NULL record to keep this from happening.

Scores

CVSS v3 4.7
EPSS 0.0011
EPSS Percentile 1.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-362
Status published
Products (12)
linux/Kernel 5.15.0 - 5.15.80linux
linux/Kernel 5.16.0 - 6.0.10linux
Linux/Linux < 5.15
Linux/Linux 5.15
Linux/Linux 5.15.80 - 5.15.*
Linux/Linux 6.0.10 - 6.0.*
Linux/Linux 6.1
Linux/Linux 7491e2c442781a1860181adb5ab472a52075f393 - 7291dec4f2d17a2d3fd1f789fb41e58476539f21
Linux/Linux 7491e2c442781a1860181adb5ab472a52075f393 - 73f5191467ffe3af82f27fe0ea6a8c2fac724d3f
Linux/Linux 7491e2c442781a1860181adb5ab472a52075f393 - 94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26
... and 2 more
Published May 01, 2025
Tracked Since Feb 18, 2026