CVE-2022-49799

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix wild-memory-access in register_synth_event()

In register_synth_event(), if set_synth_event_print_fmt() failed, then

both trace_remove_event_call() and unregister_trace_event() will be

called, which means the trace_event_call will call

__unregister_trace_event() twice. As the result, the second unregister

will causes the wild-memory-access.

register_synth_event

set_synth_event_print_fmt failed

trace_remove_event_call

event_remove

if call->event.funcs then

__unregister_trace_event (first call)

unregister_trace_event

__unregister_trace_event (second call)

Fix the bug by avoiding to call the second __unregister_trace_event() by

checking if the first one is called.

general protection fault, probably for non-canonical address

0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI

KASAN: maybe wild-memory-access in range

[0xdead000000000120-0xdead000000000127]

CPU: 0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References