Linux · Linux Kernel · CVE-2022-49647
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
A vulnerability in the Linux kernel has been resolved. The issue occurs when tasks are moved across cgroups during migration, and some tasks are involved in identity noop migrations while others are actually moving across cgroups. This can lead to a use-after-free scenario, causing the cset to be destroyed if all tasks leave it before the migration finishes. The problem is caused by overloading cset->mg preload node for both src and dst preload lists.
**Recommendations**
To resolve this issue, apply the patch that separates out cset->mg preload node into ->mg src preload node and ->mg dst preload node, ensuring that the src and dst preloadings do not interfere with each other.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.