What is CVE-2022-49025?

CVE-2022-49025 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2024-10-21.

How severe is CVE-2022-49025?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2022-49025 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Linux

CVE-2022-49025

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free when reverting termination table When having multiple dests with termination tables and second one or afterwards fails the driver reverts usage of term tables but doesn't reset the assignment in attr->dests[num_vport_dests].termtbl which case a use-after-free when releasing the rule. Fix by resetting the assignment of termtbl to null.

Vulnerability class: Use-After-Free

EPSS: 0.002 (16.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 10caabdaad5ace85577a453da97d1f8d3b944427, 5.3, 0
Linux Linux_kernel — versions 6.1

Weakness classification (CWE)

CWE-416 — Use After Free

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2022-49025?: CVE-2022-49025 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2024-10-21.
How severe is CVE-2022-49025?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2022-49025 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.