In the Linux kernel, the following vulnerability has been resolved:
net: hsr: Fix potential use-after-free
The skb is delivered to netif_rx() which may free it, after calling this, dereferencing skb may trigger use-after-free.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49015.json"
}[
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-0f094854",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ca81a161e406834a1fdc405fc83a572bd14b8d9"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-18a1e662",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b35d899854d5d5d58eb7d7e7c0f61afc60d3a9e9"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-20206ca6",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8393ce5040803666bfa26a3a7bf41e44fab0ace9"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-36b1deed",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dca370e575d9b6c983f5015e8dc035e23e219ee6"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-4671fe73",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8393ce5040803666bfa26a3a7bf41e44fab0ace9"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-49888acb",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53a62c5efe91665f7a41fad0f888a96f94dc59eb"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-503e8cf0",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ca81a161e406834a1fdc405fc83a572bd14b8d9"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-52aad7fd",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e177d32442b7ed08a9fa61b61724abc548cb248"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-70d3d02e",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3add2b8cf620966de3ebfa07679ca12d33ec26f"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-733c6fc1",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dca370e575d9b6c983f5015e8dc035e23e219ee6"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-9a8255d2",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b351609af4fdbc23f79ab2b12748f4403ea9af4"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-a3938f21",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3add2b8cf620966de3ebfa07679ca12d33ec26f"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"78750486463737510737284270779281188155",
"149295811680053267407583758890977091320",
"75567584055014310143131591659706587711",
"100276657359221014808190032909234357439",
"148748787722014092205499246033396410074",
"244849011022734600497318584747591347507",
"33400390021363825322559579095747856781",
"125571918951739112237347692896417482671",
"165978192513099895532096194677467158357",
"267299952186867995514341754075743654585",
"233072086857393813131328379042487483506",
"170024642793806957828949997760148924461",
"5862075827492578532174571460062701773"
]
},
"id": "CVE-2022-49015-b45a279f",
"target": {
"file": "net/hsr/hsr_forward.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b35d899854d5d5d58eb7d7e7c0f61afc60d3a9e9"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-c29a02f2",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e177d32442b7ed08a9fa61b61724abc548cb248"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-cab2162b",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53a62c5efe91665f7a41fad0f888a96f94dc59eb"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "240198350064768009368174178979646198130",
"length": 429.0
},
"id": "CVE-2022-49015-d7d75f34",
"target": {
"file": "net/hsr/hsr_forward.c",
"function": "hsr_deliver_master"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b351609af4fdbc23f79ab2b12748f4403ea9af4"
}
]