CVE-2022-49921: net: sched: Fix use after free in red_enqueue()
In the Linux kernel, the following vulnerability has been resolved:
net: sched: Fix use after free in redenqueue()
We can't use "skb" again after passing it to qdiscenqueue(). This is basically identical to commit 2f09707d0c97 ("schsfb: Also store skb len before calling child enqueue").
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49921?
CVE-2022-49921 has been assigned a medium severity rating due to its potential impact on network scheduling functionality.
How do I fix CVE-2022-49921?
To fix CVE-2022-49921, update the Linux kernel to the latest stable version where this vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2022-49921?
CVE-2022-49921 affects specific versions of the Linux kernel that utilize the vulnerable red_enqueue() function.
What are the implications of CVE-2022-49921 for system security?
CVE-2022-49921 could lead to use-after-free vulnerabilities in network scheduling, potentially compromising system stability and security.
Is there a workaround for CVE-2022-49921?
While updating is the recommended fix for CVE-2022-49921, no official workarounds have been provided.