CVE-2022-49672

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was found between the tun file and device destruction in the Linux kernel. This issue arises because NAPIs, which are part of the struct tun file, can be destroyed before the netdev, necessitating explicit deletion. The current code fails to delete the NAPI if the queue was detached first.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.