Riskcovery

CVE-2022-49798

tracing: Fix race where eprobes can be called before the event

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix race where eprobes can be called before the event

The flag that tells the event to call its triggers after reading the event is set for eprobes after the eprobe is enabled. This leads to a race where the eprobe may be triggered at the beginning of the event where the record information is NULL. The eprobe then dereferences the NULL record causing a NULL kernel pointer bug.

Test for a NULL record to keep this from happening.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7491e2c442781a1860181adb5ab472a52075f393 to before 7291dec4f2d17a2d3fd1f789fb41e58476539f21Affected
  • 7491e2c442781a1860181adb5ab472a52075f393 to before 73f5191467ffe3af82f27fe0ea6a8c2fac724d3fAffected
  • 7491e2c442781a1860181adb5ab472a52075f393 to before 94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.80 through 5.15.*Not affected
  • 6.0.10 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.