PT-2025-8344
CVE-2022-49410
·
Published
2025-02-26
·
Updated
2026-10-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A potential double free issue in the Linux kernel has been identified. The problem occurs in the
create var ref() function, where init var ref() is called to initialize fields of ref field, which is allocated in create hist field(). If an error is encountered, init var ref() frees the corresponding fields, but the caller later calls destroy hist field() to handle the error, resulting in a double free of the fields.Recommendations
To resolve this issue, store NULL to the corresponding fields when they are freed in
init var ref().Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾