First published: Thu May 01 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drbd: use after free in drbd_create_device() The drbd_destroy_connection() frees the "connection" so use the _safe() iterator to prevent a use after free.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
DRBD | ||
Linux Kernel |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-49811 has been classified with a severity level that may lead to potential use after free vulnerabilities in affected systems.
To fix CVE-2022-49811, ensure to update your Linux kernel or DRBD software to the latest patched version that addresses this vulnerability.
CVE-2022-49811 affects systems running the Linux kernel and DRBD.
CVE-2022-49811 exploits a use after free condition in the drbd_create_device function.
There is no documented workaround for CVE-2022-49811; applying the recommended updates is necessary to mitigate the risk.