CVE-2022-49114
published 2025-02-26CVE-2022-49114: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease…
PriorityP343high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.36%
27.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix use after free in fc_exch_abts_resp()
fc_exch_release(ep) will decrease the ep's reference count. When the
reference count reaches zero, it is freed. But ep is still used in the
following code, which will lead to a use after free.
Return after the fc_exch_release() call to avoid use after free.
Affected
28 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 4a131d4ea8b581ac9b01d3a72754db4848be3232 | 4a131d4ea8b581ac9b01d3a72754db4848be3232 |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 499d198494e77b6533251b9b909baf5c101129cb | 499d198494e77b6533251b9b909baf5c101129cb |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 6044ad64f41c87382cfeeca281573d1886d80cbe | 6044ad64f41c87382cfeeca281573d1886d80cbe |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836 | 5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836 |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 1d7effe5fff9d28e45e18ac3a564067c7ddfe898 | 1d7effe5fff9d28e45e18ac3a564067c7ddfe898 |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < f581df412bc45c95176e3c808ee2839c05b2ab0c | f581df412bc45c95176e3c808ee2839c05b2ab0c |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 87909291762d08fdb60d19069d7a89b5b308d0ef | 87909291762d08fdb60d19069d7a89b5b308d0ef |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 412dd8299b02e4410fe77b8396953c1a8dde183a | 412dd8299b02e4410fe77b8396953c1a8dde183a |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 271add11994ba1a334859069367e04d2be2ebdd4 | 271add11994ba1a334859069367e04d2be2ebdd4 |
| linux | linux_kernel | < 4.9.311 | 4.9.311 |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 4.10 < 4.14.276 | 4.14.276 |
| linux | linux_kernel | >= 4.15 < 4.19.238 | 4.19.238 |
| linux | linux_kernel | >= 4.20 < 5.4.189 | 5.4.189 |
| linux | linux_kernel | >= 5.11 < 5.15.34 | 5.15.34 |
| linux | linux_kernel | >= 5.16 < 5.16.20 | 5.16.20 |
| linux | linux_kernel | >= 5.17 < 5.17.3 | 5.17.3 |
| linux | linux_kernel | >= 5.5 < 5.10.111 | 5.10.111 |
| ubuntu | linux | — | — |
| ubuntu | linux-aws | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6f5q-x637-6prf: In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix use after free in fc_exch_abts_resp()
fc_exch_release(ep) will
ghsa_unreviewed·2025-03-04
CVE-2022-49114 [HIGH] CWE-416 GHSA-6f5q-x637-6prf: In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix use after free in fc_exch_abts_resp()
fc_exch_release(ep) will
In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix use after free in fc_exch_abts_resp()
fc_exch_release(ep) will decrease the ep's reference count. When the
reference count reaches zero, it is freed. But ep is still used in the
following code, which will lead to a use after free.
Return after the fc_exch_release() call to avoid use after free.
OSV
CVE-2022-49114: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will de
osv·2025-02-26·CVSS 7.8
CVE-2022-49114 [HIGH] CVE-2022-49114: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will de
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free. Return after the fc_exch_release() call to avoid use after free.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2026-10-13·CVSS 8.8
CVE-2022-49114 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- SCSI subsystem;
- Bluetooth subsystem;
(CVE-2022-49111, CVE-2022-49114)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtu
Red Hat
kernel: scsi: libfc: Fix use after free in fc_exch_abts_resp()
vendor_redhat·2025-02-26·CVSS 7.8
CVE-2022-49114 [HIGH] kernel: scsi: libfc: Fix use after free in fc_exch_abts_resp()
kernel: scsi: libfc: Fix use after free in fc_exch_abts_resp()
In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix use after free in fc_exch_abts_resp()
fc_exch_release(ep) will decrease the ep's reference count. When the
reference count reaches zero, it is freed. But ep is still used in the
following code, which will lead to a use after free.
Return after the fc_exch_release() call to avoid use after free.
A vulnerability was found in the Linux kernel's SCSI libfc library in the `fc_exch_abts_resp()` function, which can lead to a use-after-free scenario. This issue can occur because the function calls `fc_exch_release()`, which decrements a reference count stored in the `ep` object and then frees the object once the count is zero. However, the `ep` objec
Debian
CVE-2022-49114: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: libfc...
vendor_debian·2022·CVSS 7.8
CVE-2022-49114 [HIGH] CVE-2022-49114: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: libfc...
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free. Return after the fc_exch_release() call to avoid use after free.
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: resolved (fixed in 5.10.113-1)
forky: resolved (fixed in 5.17.3-1)
sid: resolved (fixed in 5.17.3-1)
trixie: resolved (fixed in 5.17.3-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/1d7effe5fff9d28e45e18ac3a564067c7ddfe898https://git.kernel.org/stable/c/271add11994ba1a334859069367e04d2be2ebdd4https://git.kernel.org/stable/c/412dd8299b02e4410fe77b8396953c1a8dde183ahttps://git.kernel.org/stable/c/499d198494e77b6533251b9b909baf5c101129cbhttps://git.kernel.org/stable/c/4a131d4ea8b581ac9b01d3a72754db4848be3232https://git.kernel.org/stable/c/5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836https://git.kernel.org/stable/c/6044ad64f41c87382cfeeca281573d1886d80cbehttps://git.kernel.org/stable/c/87909291762d08fdb60d19069d7a89b5b308d0efhttps://git.kernel.org/stable/c/f581df412bc45c95176e3c808ee2839c05b2ab0c
2025-02-26
Published