CVE-2022-49114: scsi: libfc: Fix use after free in fc_exch_abts_resp()
In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix use after free in fcexchabtsresp()
fcexchrelease(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free.
Return after the fcexchrelease() call to avoid use after free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49114?
CVE-2022-49114 has been classified as a high-severity vulnerability due to its potential impact on system stability and security.
How do I fix CVE-2022-49114?
To mitigate CVE-2022-49114, it is recommended to update your Linux kernel to a version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2022-49114?
CVE-2022-49114 affects various versions of the Linux kernel, specifically versions prior to 4.9.311 and specific versions within the 4.x and 5.x ranges.
What is the nature of the vulnerability in CVE-2022-49114?
CVE-2022-49114 is a use-after-free vulnerability in the Linux kernel's SCSI subsystem that could lead to unexpected behavior or crashes.
Is CVE-2022-49114 exploitable remotely?
CVE-2022-49114 is primarily related to local system operations, but its exploitation could potentially affect system operations in multi-user environments.