CVE-2022-49275
Linux Kernel CAN Use After Free Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone skb then free the skb. Move the can_put_echo_skb() for the m_can version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch.
INFO
Published Date :
Feb. 26, 2025, 7:01 a.m.
Last Modified :
March 25, 2025, 3:24 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
Solution
- Update the Linux kernel to a version that includes the fix.
- Apply the specific patch for the m_can module.
- Test the system after applying the kernel update.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-49275.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-49275 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-49275
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-49275 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-49275 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Mar. 25, 2025
Action Type Old Value New Value Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.33 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.17 up to (excluding) 5.17.2 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.110 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 5.16.19 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.15 up to (excluding) 4.19.253 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.207 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.18 up to (excluding) 4.9.324 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.10 up to (excluding) 4.14.289 Added Reference Type kernel.org: https://git.kernel.org/stable/c/08d90846e438ac22dc56fc49ec0b0d195831c5ed Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/2e8e79c416aae1de224c0f1860f2e3350fa171f8 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/31417073493f302d26ab66b3abc098d43227b835 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/4db7d6f481990dd179a9ee7126dc7aa31ea4fff3 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/7728d937ec403a1ceff9483023252d2cb8777f81 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/869016a2938ac44f7b2fb7fc22c89edad99eb9b3 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/d3892a747ab16b1eb6593a19d29f62c3b3f020ac Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/d93ed9aff64968f4cdad690712eb4f48ae537bde Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/f43e64076ff1b1dcb893fb77ad1204105f710a29 Types: Patch -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Mar. 04, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Added CWE CWE-416 -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 26, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone skb then free the skb. Move the can_put_echo_skb() for the m_can version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch. Added Reference https://git.kernel.org/stable/c/08d90846e438ac22dc56fc49ec0b0d195831c5ed Added Reference https://git.kernel.org/stable/c/2e8e79c416aae1de224c0f1860f2e3350fa171f8 Added Reference https://git.kernel.org/stable/c/31417073493f302d26ab66b3abc098d43227b835 Added Reference https://git.kernel.org/stable/c/4db7d6f481990dd179a9ee7126dc7aa31ea4fff3 Added Reference https://git.kernel.org/stable/c/7728d937ec403a1ceff9483023252d2cb8777f81 Added Reference https://git.kernel.org/stable/c/869016a2938ac44f7b2fb7fc22c89edad99eb9b3 Added Reference https://git.kernel.org/stable/c/d3892a747ab16b1eb6593a19d29f62c3b3f020ac Added Reference https://git.kernel.org/stable/c/d93ed9aff64968f4cdad690712eb4f48ae537bde Added Reference https://git.kernel.org/stable/c/f43e64076ff1b1dcb893fb77ad1204105f710a29