PT-2025-8104 · Linux+3 · Linux Kernel+3
Zhang Wensheng
·
Published
2022-03-05
·
Updated
2025-08-18
·
CVE-2022-49176
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.10.0-10295-g576c6382529e
Description
A use-after-free issue has been identified in the Linux kernel, specifically in the
bfq dispatch request function. This issue can be triggered during normal scsi-mq testing, as reported by KASAN. The problem arises when a request is dispatched after its associated memory has been freed, leading to a potential crash or other unintended behavior. The estimated number of potentially affected devices worldwide is not provided.Recommendations
To resolve this issue, update to a version of the Linux kernel that includes the fix for the
bfq dispatch request use-after-free bug. As a temporary workaround, consider disabling the bfq dispatch request function until a patch is available. However, this may impact the performance and functionality of the system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse
Ubuntu