# CVE-2022-48649: linux: In the Linux kernel, the following vulnerability has been resolved:  mm/slab_common: fix possible double free of kmem...

CVE-2022-48649 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48649, released April 28, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-48649
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0022
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 28, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  mm/slab_common: fix possible double free of kmem_cache  When doing slub_debug test, kfence's 'test_memcache_typesafe_by_rcu' kunit test case cause a use-after-free error:    BUG: KASAN: use-after-free in kobject_del+0x14/0x30   Read of size 8 at addr ffff888007679090 by task kunit_try_catch/261    CPU: 1 PID: 261 Comm: kunit_try_catch Tainted: G    B            N 6.0.0-rc5-next-20220916 #17   Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014   Call Trace:    <TASK>    dump_stack_lvl+0x34/0x48    print_address_description.constprop.0+0x87/0x2a5    print_report+0x103/0x1ed    kasan_report+0xb7/0x140    kobject_del+0x14/0x30    kmem_cache_destroy+0x130/0x170    test_exit+0x1a/0x30    kunit_try_run_case+0xad/0xc0    kunit_generic_run_threadfn_adapter+0x26/0x50    kthread+0x17b/0x1b0    </TASK>  The cause is inside kmem_cache_destroy():  kmem_cache_destroy     acquire lock/mutex     shutdown_cache         schedule_work(kmem_cache_release) (if RCU flag set)     release lock/mutex     kmem_cache_release (if RCU flag not set)  In some certain timing, the scheduled work could be run before the next RCU flag checking, which can then get a wrong value and lead to double kmem_cache_release().  Fix it by caching the RCU flag inside protected area, just like 'refcnt'

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 12.15 (bookworm) | 6.0.2-1 | [DEBIAN-CVE-2022-48649](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48649.md) | Apr 28, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.0.2-1 | [DEBIAN-CVE-2022-48649](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48649.md) | Apr 28, 2024 |
| Linux | linux Debian 14 | 6.0.2-1 | [DEBIAN-CVE-2022-48649](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48649.md) | Apr 28, 2024 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.