CVE-2022-49015: linux Use After Free
CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2022-49015DEBIAN-CVE-2022-49015
Published 21-10-2024Last modified 05-08-2026
Vulnerability summary
CVE-2022-49015 is a high (CVSS 8.8) Use After Free vulnerability in linux. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.1 (CVE.org)EPSS score
0.35%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 10 · Related 10Timeline
- 21-10-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netif_rx() which may free it, after calling this, dereferencing skb may trigger use-after-free.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 8.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.8–8.8
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.35%
Chance of exploitation in the next 30 days
Percentile
27%
Versus all other CVEs
30-day change
0.00 pp
From 0.35% on 21-09-2026
21-09-202621-10-2026
EPSS score0.35%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu113 products
- linuxAll versions (No fix recorded) | < 4.15.0-206.217 | < 5.4.0-144.161 | < 5.15.0-67.74
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 4.15.0-1151.164 | < 5.4.0-1097.105 | < 5.15.0-1031.35
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < 8393ce5040803666bfa26a3a7bf41e44fab0ace9 | ≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < 4b351609af4fdbc23f79ab2b12748f4403ea9af4 | ≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < b35d899854d5d5d58eb7d7e7c0f61afc60d3a9e9 | ≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < 53a62c5efe91665f7a41fad0f888a96f94dc59eb | ≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < 7ca81a161e406834a1fdc405fc83a572bd14b8d9 | ≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < dca370e575d9b6c983f5015e8dc035e23e219ee6 | ≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < f3add2b8cf620966de3ebfa07679ca12d33ec26f | ≥ f421436a591d34fa5279b54a96ac07d70250cc8d, < 7e177d32442b7ed08a9fa61b61724abc548cb248 | 3.13
- linux_kernel≥ 3.13, < 4.9.335 | ≥ 4.10, < 4.14.301 | ≥ 4.15, < 4.19.268 | ≥ 4.20, < 5.4.226 | ≥ 5.5, < 5.10.158 | ≥ 5.11, < 5.15.82 | ≥ 5.16, < 6.0.12 | 6.1:rc1 | 6.1:rc2 | 6.1:rc3 | 6.1:rc4 | 6.1:rc5 | 6.1:rc6 | 6.1:rc7
Debian1 product
- linux< 6.0.12-1
3 vendors · 116 products
