CVE-2022-49182
Published: 26 February 2025
Summary
CVE-2022-49182 is a high-severity Use After Free (CWE-416) vulnerability in Linux Linux Kernel. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 4.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2022-49182 is a use-after-free vulnerability (CWE-416) in the Linux kernel's hns3 network driver. The issue arises when adding a port-based VLAN, which requires removing a VF VLAN from hardware and setting its state to false in the VF VLAN list. Without proper synchronization, a concurrent periodic task may free the same node, resulting in a use-after-free condition. The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
A local attacker with low privileges can exploit this vulnerability with low attack complexity and no user interaction required. Successful exploitation could lead to high impacts on confidentiality, integrity, and availability, potentially allowing arbitrary code execution or system crashes within the kernel context.
Kernel advisories provide mitigation through patches that introduce a VLAN list lock to synchronize access and prevent the race condition. These fixes are available in stable kernel trees via commits such as 09e383ca97e798f9954189b741af54b5c51e7a97, 1932a624ab88ff407d1a1d567fe581faa15dc725, 30f0ff7176efe8ac6c55f85bce26ed58bb608758, and f58af41deeab0f45c9c80adf5f2de489ebbac3dd on git.kernel.org.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-55044
Vulnerability details
In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to protect vlan list When adding port base VLAN, vf VLAN need to remove from HW and modify the vlan state in vf VLAN…
more
list as false. If the periodicity task is freeing the same node, it may cause "use after free" error. This patch adds a vlan list lock to protect the vlan list.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local kernel use-after-free in network driver directly enables privilege escalation via arbitrary code execution in kernel context.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Flaw remediation requires applying the kernel patch that adds the VLAN list lock, directly eliminating the use-after-free race condition in the hns3 driver.
Monitoring kernel security advisories and directives ensures timely detection of this CVE and distribution of patching instructions.
Vulnerability scanning identifies systems with vulnerable Linux kernel versions affected by the hns3 driver use-after-free flaw.