CVE-2022-34494: Double Free
Last updated 29 November 2024
Other sources
rpmsgvirtioaddctrldev in drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel before 5.18.4 has a double free.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.18.4
Event History
Frequently Asked Questions
What is the severity of CVE-2022-34494?
CVE-2022-34494 has a high severity due to its double free vulnerability in the Linux kernel.
How do I fix CVE-2022-34494?
To fix CVE-2022-34494, update your Linux kernel to version 5.18.4 or later.
Which versions of the Linux kernel are affected by CVE-2022-34494?
CVE-2022-34494 affects all Linux kernel versions prior to 5.18.4.
Is there a specific software package related to CVE-2022-34494?
Yes, the Debian linux package versions lower than 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, and 6.12.12-1 are affected.
What components of the Linux kernel does CVE-2022-34494 impact?
CVE-2022-34494 impacts the rpmsg_virtio_add_ctrl_dev function in virtio_rpmsg_bus.c.