CVE-2022-49275
published 2025-02-26CVE-2022-49275: In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone skb…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.28%
19.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
can: m_can: m_can_tx_handler(): fix use after free of skb
can_put_echo_skb() will clone skb then free the skb. Move the
can_put_echo_skb() for the m_can version 3.0.x directly before the
start of the xmit in hardware, similar to the 3.1.x branch.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < d93ed9aff64968f4cdad690712eb4f48ae537bde | d93ed9aff64968f4cdad690712eb4f48ae537bde |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < d3892a747ab16b1eb6593a19d29f62c3b3f020ac | d3892a747ab16b1eb6593a19d29f62c3b3f020ac |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < 7728d937ec403a1ceff9483023252d2cb8777f81 | 7728d937ec403a1ceff9483023252d2cb8777f81 |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < 08d90846e438ac22dc56fc49ec0b0d195831c5ed | 08d90846e438ac22dc56fc49ec0b0d195831c5ed |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < 869016a2938ac44f7b2fb7fc22c89edad99eb9b3 | 869016a2938ac44f7b2fb7fc22c89edad99eb9b3 |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < f43e64076ff1b1dcb893fb77ad1204105f710a29 | f43e64076ff1b1dcb893fb77ad1204105f710a29 |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < 4db7d6f481990dd179a9ee7126dc7aa31ea4fff3 | 4db7d6f481990dd179a9ee7126dc7aa31ea4fff3 |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < 31417073493f302d26ab66b3abc098d43227b835 | 31417073493f302d26ab66b3abc098d43227b835 |
| linux | linux | >= 80646733f11c2e9de3b6339f7e635047e6087280 < 2e8e79c416aae1de224c0f1860f2e3350fa171f8 | 2e8e79c416aae1de224c0f1860f2e3350fa171f8 |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 3.18 < 4.9.324 | 4.9.324 |
| linux | linux_kernel | >= 4.10 < 4.14.289 | 4.14.289 |
| linux | linux_kernel | >= 4.15 < 4.19.253 | 4.19.253 |
| linux | linux_kernel | >= 4.20 < 5.4.207 | 5.4.207 |
| linux | linux_kernel | >= 5.11 < 5.15.33 | 5.15.33 |
| linux | linux_kernel | >= 5.16 < 5.16.19 | 5.16.19 |
| linux | linux_kernel | >= 5.17 < 5.17.2 | 5.17.2 |
| linux | linux_kernel | >= 5.5 < 5.10.110 | 5.10.110 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: can: m_can: m_can_tx_handler(): fix use after free of skb
vendor_redhat·2025-02-26·CVSS 7.8
CVE-2022-49275 [HIGH] CWE-416 kernel: can: m_can: m_can_tx_handler(): fix use after free of skb
kernel: can: m_can: m_can_tx_handler(): fix use after free of skb
In the Linux kernel, the following vulnerability has been resolved:
can: m_can: m_can_tx_handler(): fix use after free of skb
can_put_echo_skb() will clone skb then free the skb. Move the
can_put_echo_skb() for the m_can version 3.0.x directly before the
start of the xmit in hardware, similar to the 3.1.x branch.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux
Debian
CVE-2022-49275: linux - In the Linux kernel, the following vulnerability has been resolved: can: m_can:...
vendor_debian·2022·CVSS 7.8
CVE-2022-49275 [HIGH] CVE-2022-49275: linux - In the Linux kernel, the following vulnerability has been resolved: can: m_can:...
In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone skb then free the skb. Move the can_put_echo_skb() for the m_can version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch.
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: resolved (fixed in 5.10.113-1)
forky: resolved (fixed in 5.17.3-1)
sid: resolved (fixed in 5.17.3-1)
trixie: resolved (fixed in 5.17.3-1)
GHSA
GHSA-c6wg-m9gg-2cg8: In the Linux kernel, the following vulnerability has been resolved:
can: m_can: m_can_tx_handler(): fix use after free of skb
can_put_echo_skb() wil
ghsa_unreviewed·2025-03-04
CVE-2022-49275 [HIGH] CWE-416 GHSA-c6wg-m9gg-2cg8: In the Linux kernel, the following vulnerability has been resolved:
can: m_can: m_can_tx_handler(): fix use after free of skb
can_put_echo_skb() wil
In the Linux kernel, the following vulnerability has been resolved:
can: m_can: m_can_tx_handler(): fix use after free of skb
can_put_echo_skb() will clone skb then free the skb. Move the
can_put_echo_skb() for the m_can version 3.0.x directly before the
start of the xmit in hardware, similar to the 3.1.x branch.
OSV
CVE-2022-49275: In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will
osv·2025-02-26·CVSS 7.8
CVE-2022-49275 [HIGH] CVE-2022-49275: In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will
In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone skb then free the skb. Move the can_put_echo_skb() for the m_can version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/08d90846e438ac22dc56fc49ec0b0d195831c5edhttps://git.kernel.org/stable/c/2e8e79c416aae1de224c0f1860f2e3350fa171f8https://git.kernel.org/stable/c/31417073493f302d26ab66b3abc098d43227b835https://git.kernel.org/stable/c/4db7d6f481990dd179a9ee7126dc7aa31ea4fff3https://git.kernel.org/stable/c/7728d937ec403a1ceff9483023252d2cb8777f81https://git.kernel.org/stable/c/869016a2938ac44f7b2fb7fc22c89edad99eb9b3https://git.kernel.org/stable/c/d3892a747ab16b1eb6593a19d29f62c3b3f020achttps://git.kernel.org/stable/c/d93ed9aff64968f4cdad690712eb4f48ae537bdehttps://git.kernel.org/stable/c/f43e64076ff1b1dcb893fb77ad1204105f710a29
2025-02-26
Published