PT-2025-8344 · Linux+2 · Linux Kernel+2
Keita Suzuki
·
Published
2025-02-26
·
Updated
2025-04-15
·
CVE-2022-49410
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A potential double free issue in the Linux kernel has been identified. The problem occurs in the
create var ref() function, where init var ref() is called to initialize fields of ref field, which is allocated in create hist field(). If an error is encountered, init var ref() frees the corresponding fields, but the caller later calls destroy hist field() to handle the error, resulting in a double free of the fields.Recommendations
To resolve this issue, store NULL to the corresponding fields when they are freed in
init var ref().Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse