#VU104426 Use-after-free in Linux kernel - CVE-2022-49412

Vulnerability identifier: #VU104426

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49412

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the bfq_setup_merge() function in block/bfq-iosched.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/5ee21edaed09e6b25f2c007b3f326752bc89bacf
https://git.kernel.org/stable/c/7d172b9dc913e161d8ff88770eea01701ff553de
https://git.kernel.org/stable/c/8abc8763b11c35e03cc91d59fd0cd28d39f88ca9
https://git.kernel.org/stable/c/97be7d13fbd4001eeab49b1be6399f23a8c66160
https://git.kernel.org/stable/c/a16c65cca7d2c7ff965fdd3adc8df2156529caf1
https://git.kernel.org/stable/c/c1cee4ab36acef271be9101590756ed0c0c374d9

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.