CVE-2022-49696

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix use-after-free Read in tipc_named_reinit

syzbot found the following issue on:

==================================================================

BUG: KASAN: use-after-free in tipc_named_reinit+0x94f/0x9b0

net/tipc/name_distr.c:413

Read of size 8 at addr ffff88805299a000 by task kworker/1:9/23764

CPU: 1 PID: 23764 Comm: kworker/1:9 Not tainted

5.18.0-rc4-syzkaller-00878-g17d49e6e8012 #0

Hardware name: Google Compute Engine/Google Compute Engine,

BIOS Google 01/01/2011

Workqueue: events tipc_net_finalize_work

Call Trace:

<TASK>

__dump_stack lib/dump_stack.c:88 [inline]

dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106

print_address_description.constprop.0.cold+0xeb/0x495

mm/kasan/report.c:313

print_report mm/kasan/report.c:429 [inline]

kasan_report.cold+0xf4/0x1c6 mm/kasan/report.c:491

tipc_named_reinit+0x94f/0x9b0 net/tipc/name_distr.c:413

tipc_net_finalize+0x234/0x3d0 net/tipc/net.c:138

process_one_w

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References