CVE-2022-49892

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ftrace ops [1]. It was found from vmcore that perf had registered two ops with the same content successively, both dynamic. After unregistering the second ops, a use-after-free occurred. In ftrace_shutdown(), when the second ops is unregistered, the FTRACE_UPDATE_CALLS command is not set because there is another enabled ops with the same content. Also, both ops are dynamic and the ftrace callback function is ftrace_ops_list_func, so the F...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= edb096e00724f02db5f6ec7900f3bbd465c6c76f < ea5f2fd4640ecbb9df969bf8bb27733ae2183169, >= edb096e00724f02db5f6ec7900f3bbd465c6c76f < 88561a66777e7a2fe06638c6dcb22a9fae0b6733, >= edb096e00724f02db5f6ec7900f3bbd465c6c76f < cc1b9961a0ceb70f6ca4e2f4b8bb71c87c7a495c, >= edb096e00724f02db5f6ec7900f3bbd465c6c76f < 0e792b89e6800cd9cb4757a76a96f7ef3e8b6294, >= a60e407b961e818541ff7924afa8e51fbdb21a61, >= ed1bf4397d2219d4b9ec2d5517416ba102186650, >= 100553e197e2c41eccf9fa04b2be9cd11ae21215, >= 30d3c1c9c9dd31b3c3a5aa0f4f40f1e321c6c791, >= 4.1.45 < 4.2, >= 4.4.89 < 4.5, >= 4.9.52 < 4.10, >= 4.13.4 < 4.14, >= 4.14, >= 4.13.4 < 5.10.154, >= 5.11 < 5.15.78, >= 5.16 < 6.0.8, 6.1

Fixed versions

4.2, 4.5, 4.10, 5.10.154, 5.15.78, 6.0.8

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416