Riskcovery

CVE-2022-49811

drbd: use after free in drbd_create_device()

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drbd: use after free in drbd_create_device()

The drbd_destroy_connection() frees the "connection" so use the _safe() iterator to prevent a use after free.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 to before fc1897f16ebcfd22364f2afcc27f53a740f3bc7aAffected
  • b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 to before bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1Affected
  • b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 to before 813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5Affected
  • b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 to before 9ed51414aef6e59e832e2960f10766dce2d5b1a1Affected
  • b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 to before 7d93417d596402ddd46bd76c721f205d09d0d025Affected
  • b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 to before c2a00b149836d60c222930bbea6b2139caf34d4fAffected
  • b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 to before a7a1598189228b5007369a9622ccdf587be0730fAffected
LinuxLinux
  • 3.15Affected
  • before 3.15Not affected
  • 4.14.300 through 4.14.*Not affected
  • 4.19.267 through 4.19.*Not affected
  • 5.4.225 through 5.4.*Not affected
  • 5.10.156 through 5.10.*Not affected
  • 5.15.80 through 5.15.*Not affected
  • 6.0.10 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.