What is CVE-2022-49182?

CVE-2022-49182 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2025-02-26.

How severe is CVE-2022-49182?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Linux

CVE-2022-49182

In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to protect vlan list When adding port base VLAN, vf VLAN need to remove from HW and modify the vlan state in vf VLAN list as false. If the periodicity task is freeing the same node, it may cause "use after free" error. This patch adds a vlan list lock to protect the vlan list.

Vulnerability class: Use-After-Free

EPSS: 0.003 (19.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions c6075b193462d9a3930fb41f587f94720658752a, 5.1, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-416 — Use After Free

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2022-49182?: CVE-2022-49182 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2025-02-26.
How severe is CVE-2022-49182?: High severity. CVSS v3 base score is 7.8 out of 10.