CVE-2022-49176

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the block layer support of the Linux kernel within the block/bfq-iosched.c module. The bfq dispatch request() function contains a use-after-free flaw, which occurs when the system attempts to reuse memory that has already been released. This can be triggered during normal scsi-mq tests, as reported by KASAN (Kernel Address Sanitizer). Exploitation of this issue could allow an attacker to compromise the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.