CVE-2022-49889

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel's tracing subsystem has been resolved. The issue arises when the number of listed CPUs exceeds the actual number of existing CPUs. The tracing subsystem allocates a per cpu directory with access to the per CPU ring buffer via a cpuX file, but only allocates buffers for online CPUs. With the addition of waking waiters on the ring buffer when closing the file, the ring buffer wake waiters() function must ensure that the buffer is allocated before trying to wake waiters to prevent a NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.