PT-2025-8344

CVE-2022-49410

·

Published

2025-02-26

·

Updated

2026-10-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential double free issue in the Linux kernel has been identified. The problem occurs in the create var ref() function, where init var ref() is called to initialize fields of ref field, which is allocated in create hist field(). If an error is encountered, init var ref() frees the corresponding fields, but the caller later calls destroy hist field() to handle the error, resulting in a double free of the fields.
Recommendations To resolve this issue, store NULL to the corresponding fields when they are freed in init var ref().
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
CLSA-2026-1777616064
CLSA-2026-1780132980
OPENSUSE-SU-2025_1263-1
SUSE-SU-2025:1027-1
SUSE-SU-2025_1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1194-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1
SUSE-SU-2025:1263-1
SUSE-SU-2025_1263-1
Found an issue in the description? Have something to add? Feel free to write us 👾