{
  "cveId": "CVE-2022-48649",
  "url": "https://patchblox.com/security/cve/CVE-2022-48649",
  "summary": "CVE-2022-48649 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48649, released April 28, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/slab_common: fix possible double free of kmem...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  mm/slab_common: fix possible double free of kmem_cache  When doing slub_debug test, kfence\u0027s \u0027test_memcache_typesafe_by_rcu\u0027 kunit test case cause a use-after-free error:    BUG: KASAN: use-after-free in kobject_del\u002B0x14/0x30   Read of size 8 at addr ffff888007679090 by task kunit_try_catch/261    CPU: 1 PID: 261 Comm: kunit_try_catch Tainted: G    B            N 6.0.0-rc5-next-20220916 #17   Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996), BIOS 1.15.0-1 04/01/2014   Call Trace:    \u003CTASK\u003E    dump_stack_lvl\u002B0x34/0x48    print_address_description.constprop.0\u002B0x87/0x2a5    print_report\u002B0x103/0x1ed    kasan_report\u002B0xb7/0x140    kobject_del\u002B0x14/0x30    kmem_cache_destroy\u002B0x130/0x170    test_exit\u002B0x1a/0x30    kunit_try_run_case\u002B0xad/0xc0    kunit_generic_run_threadfn_adapter\u002B0x26/0x50    kthread\u002B0x17b/0x1b0    \u003C/TASK\u003E  The cause is inside kmem_cache_destroy():  kmem_cache_destroy     acquire lock/mutex     shutdown_cache         schedule_work(kmem_cache_release) (if RCU flag set)     release lock/mutex     kmem_cache_release (if RCU flag not set)  In some certain timing, the scheduled work could be run before the next RCU flag checking, which can then get a wrong value and lead to double kmem_cache_release().  Fix it by caching the RCU flag inside protected area, just like \u0027refcnt\u0027",
  "published": "2024-04-28T13:15:07Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00217,
  "epssPercentile": 0.12251,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48649",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48649",
      "released": "2024-04-28T13:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48649",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48649",
      "released": "2024-04-28T13:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48649",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48649",
      "released": "2024-04-28T13:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}