CVE-2022-49127: ref_tracker: implement use-after-free detection

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-26 · updated 2026-08-04
Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: ref_tracker: implement use-after-free detection Whenever ref_tracker_dir_init() is called, mark the struct ref_tracker_dir as dead. Test the dead status from ref_tracker_alloc() and ref_tracker_free() This should detect buggy dev_put()/dev_hold() happening too late in netdevice dismantle process.

Affected products

Linux kernel: from 5.17 before 5.17.3 — fixed in 5.17.3

How to fix

Upgrade to a fixed version: Linux kernel 5.17.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/3743c9de303fa36c2e2ca2522ab280c52bcafbd2
https://git.kernel.org/stable/c/e3ececfe668facd87d920b608349a32607060e66

Get alerted when CVE-2022-49127 or the next vulnerability affects your stack