PT-2025-8164 · Linux+3 · Linux Kernel+3
Kumar Kartikeya Dwivedi
·
Published
2022-01-18
·
Updated
2025-09-29
·
CVE-2022-49236
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free issue exists in the Linux kernel due to a race condition between the btf try get module and load module functions. This occurs when the module BTF is published to userspace before the module initcall is invoked, allowing btf try get module to succeed even if the module has not been fully initialized. If the module loading fails and the module is freed, a subsequent call to module put for the freed module can result in a use-after-free issue. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations
To resolve this issue, apply the patch that sets a flag BTF MODULE F LIVE from the notifier callback when the MODULE STATE LIVE state is reached for the module, preventing btf try get module from returning a module that is not fully formed. As a temporary workaround, consider restricting access to the vulnerable module until the patch is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Suse