CVE-2022-2526

A use-after-free vulnerability was found in systemd. This issue occurs due to the onstreamio() function and dnsstreamcomplete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2526.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "systemd 240"
                },
                {
                    "last_affected": "systemd 240"
                }
            ]
        }
    ],
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-416"
    ]
}

References

Affected packages

Git / github.com/systemd/systemd

Affected ranges

Type

GIT

Repo

https://github.com/systemd/systemd

Events

Introduced

Fixed

d973d94dec349fb676fdd844f6fe2ada3538f27c

Database specific

{
    "source": "REFERENCES"
}

Affected versions

Other

v10

v11

v12

v13

v14

v15

v16

v17

v18

v183

v184

v185

v186

v187

v188

v189

v19

v190

v191

v192

v193

v194

v195

v196

v197

v198

v199

v20

v200

v201

v202

v203

v204

v205

v206

v207

v208

v209

v21

v210

v211

v212

v213

v214

v215

v216

v217

v218

v219

v22

v220

v221

v222

v223

v224

v225

v226

v227

v228

v229

v23

v230

v231

v232

v233

v234

v235

v236

v237

v238

v239

v24

v25

v26

v27

v28

v29

v30

v31

v32

v33

v34

v35

v36

v37

v38

v39

v40

v41

v42

v43

v44

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2526.json"

Git / github.com/systemd/systemd-stable

Affected ranges

Type

GIT

Repo

https://github.com/systemd/systemd-stable

Events

Introduced

1742aae2aa8cd33897250d6fcfbe10928e43eb2f

Last affected

1742aae2aa8cd33897250d6fcfbe10928e43eb2f

Database specific

{
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "240"
        },
        {
            "last_affected": "240"
        }
    ],
    "cpe": "cpe:2.3:a:systemd_project:systemd:240:*:*:*:*:*:*:*"
}

Affected versions

Other

240

v240

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2526.json"