IT

Tracker / CVE-2022-49275

CVE-2022-49275

High 7.8

In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone skb then free the skb. Move the can_put_echo_skb() for the m_can version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch.

Affected products and versions

linux linux_kernel · 3.18 → 4.9.324
linux linux_kernel · 4.10 → 4.14.289
linux linux_kernel · 4.15 → 4.19.253
linux linux_kernel · 4.20 → 5.4.207
linux linux_kernel · 5.11 → 5.15.33
linux linux_kernel · 5.16 → 5.16.19
linux linux_kernel · 5.17 → 5.17.2
linux linux_kernel · 5.5 → 5.10.110

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References