PT-2025-8324 · Linux+4 · Linux Kernel+4

Syzbot

·

Published

2022-01-01

·

Updated

2026-05-26

·

CVE-2022-49390

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free bug has been identified in the Linux kernel's macsec module. This issue occurs when a new macsec device is created without obtaining a reference to the real device, leading to the real device being freed prematurely. The bug can be triggered by calling the macsec get iflink() function, which attempts to access the already freed real device. This results in a use-after-free error, as reported by the KASAN (Kernel Address Sanitizer). The bug is caused by the lack of proper reference counting for the real device in the macsec module.
Recommendations To resolve this issue, apply the fix by adding dev hold track() in macsec dev init() and dev put track() in macsec free netdev(). This will ensure proper reference counting for the real device and prevent the use-after-free bug.
Note: The exact versions of the Linux kernel that are affected by this vulnerability are not specified in the provided description. Therefore, it is recommended to apply the fix to all versions of the Linux kernel that are potentially vulnerable to this issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-10577
CVE-2022-49390
LSN-0117-1
OESA-2025-1408
OESA-2025-2081
OESA-2025-2082
SUSE-SU-2025:01600-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_01600-1
SUSE-SU-2025_1241-1
USN-7907-1
USN-7907-2
USN-7907-3
USN-7907-4
USN-7907-5
USN-7922-1
USN-7922-2
USN-7922-3
USN-7922-4
USN-7922-5
USN-7928-1
USN-7928-2
USN-7928-3
USN-7928-4
USN-7928-5
USN-7937-1
USN-7938-1
USN-7939-1
USN-7939-2

Affected Products

Debian
Linuxmint
Linux Kernel
Suse
Ubuntu