CVE-2022-49811: drbd: use after free in drbd_create_device()
In the Linux kernel, the following vulnerability has been resolved:
drbd: use after free in drbdcreatedevice()
The drbddestroyconnection() frees the "connection" so use the safe() iterator to prevent a use after free.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49811?
CVE-2022-49811 has been classified with a severity level that may lead to potential use after free vulnerabilities in affected systems.
How do I fix CVE-2022-49811?
To fix CVE-2022-49811, ensure to update your Linux kernel or DRBD software to the latest patched version that addresses this vulnerability.
What are the affected systems for CVE-2022-49811?
CVE-2022-49811 affects systems running the Linux kernel and DRBD.
What does CVE-2022-49811 exploit?
CVE-2022-49811 exploits a use after free condition in the drbd_create_device function.
Is there a workaround for CVE-2022-49811?
There is no documented workaround for CVE-2022-49811; applying the recommended updates is necessary to mitigate the risk.