CVE-2022-49921

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: sched: Fix use after free in red_enqueue()

We can't use "skb" again after passing it to qdisc_enqueue(). This is basically identical to commit 2f09707d0c97 ("sch_sfb: Also store skb len before calling child enqueue").

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < 795afe0b9bb6c915f0299a8e309936519be01619affected
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < a238cdcf2bdc72207c74375fc8be13ee549ca9dbaffected
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < e877f8fa49fbccc63cb2df2e9179bddc695b825aaffected
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < 52e0429471976785c155bfbf51d80990c6cd46e2affected
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < 5960b9081baca85cc7dcb14aec1de85999ea9d36affected
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < fc4b50adb400ee5ec527a04073174e8e73a139faaffected
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < 170e5317042c302777ed6d59fdb84af9b0219d4eaffected
LinuxLinuxd7f4f332f082c4d4ba53582f902ed6b44fd6f45e < 8bdc2acd420c6f3dd1f1c78750ec989f02a1e2b9affected
LinuxLinuxab0b3b9dbf559a5633d460e748144697bd2d3aa3affected
LinuxLinux4.4.163 < 4.5affected
LinuxLinux4.7affected
LinuxLinux0 < 4.7unaffected
LinuxLinux4.9.333 <= 4.9.*unaffected
LinuxLinux4.14.299 <= 4.14.*unaffected
LinuxLinux4.19.265 <= 4.19.*unaffected
LinuxLinux5.4.224 <= 5.4.*unaffected
LinuxLinux5.10.154 <= 5.10.*unaffected
LinuxLinux5.15.78 <= 5.15.*unaffected
LinuxLinux6.0.8 <= 6.0.*unaffected
LinuxLinux6.1 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References