CVE-2022-49114

linux: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_...

CVE-2022-49114 is fixed in 47 products on 1 platform, first by RHSA-2023:2458, released May 9, 2023. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0036
29th percentile

In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free. Return after the fc_exch_release() call to avoid use after free.

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
bpftool · RHEL 9 0:7.0.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-debug · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-debug-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-debug-devel · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-debug-devel-matched · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-debug-modules · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-debug-modules-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-debug-modules-extra · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-devel · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-devel-matched · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-modules · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-modules-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-64k-modules-extra · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-abi-stablelists · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-abi-stablelists · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-core · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-debug · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug-core · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-debug-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug-devel · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-debug-devel · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug-devel-matched · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug-modules · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-debug-modules · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug-modules-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug-modules-extra · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-debug-modules-extra · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-debug-uki-virt · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-devel · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-devel · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-devel-matched · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-doc · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-doc · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-modules · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-modules · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-modules-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-modules-extra · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-modules-extra · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-tools · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-tools · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-tools-libs · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-tools-libs · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-tools-libs-devel · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-tools-libs-devel · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-uki-virt · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-zfcpdump · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-zfcpdump · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-zfcpdump-core · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-zfcpdump-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-zfcpdump-devel · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-zfcpdump-devel · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-zfcpdump-devel-matched · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-zfcpdump-modules · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-zfcpdump-modules · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-zfcpdump-modules-core · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
kernel-zfcpdump-modules-extra · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
kernel-zfcpdump-modules-extra · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
linux · Debian 12.15 (bookworm) 5.17.3-1 DEBIAN-CVE-2022-49114 Feb 26, 2025
linux · Debian 13.5 (trixie) 5.17.3-1 DEBIAN-CVE-2022-49114 Feb 26, 2025
linux · Debian 14 5.17.3-1 DEBIAN-CVE-2022-49114 Feb 26, 2025
perf · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
perf · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
python3-perf · RHEL 8 0:4.18.0-477.10.1.el8_8 RHSA-2023:2951 May 16, 2023
python3-perf · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023
rtla · RHEL 9 0:5.14.0-284.11.1.el9_2 RHSA-2023:2458 May 9, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.