CVE-2022-49798
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49798
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49798.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49798
- Downstream
- Published
- 2025-05-01T14:09:27Z
- Modified
- 2025-10-21T11:13:48.985423Z
- Summary
- tracing: Fix race where eprobes can be called before the event
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix race where eprobes can be called before the event
The flag that tells the event to call its triggers after reading the event is set for eprobes after the eprobe is enabled. This leads to a race where the eprobe may be triggered at the beginning of the event where the record information is NULL. The eprobe then dereferences the NULL record causing a NULL kernel pointer bug.
Test for a NULL record to keep this from happening.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7491e2c442781a1860181adb5ab472a52075f393Fixed7291dec4f2d17a2d3fd1f789fb41e58476539f21
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7491e2c442781a1860181adb5ab472a52075f393Fixed73f5191467ffe3af82f27fe0ea6a8c2fac724d3f
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7491e2c442781a1860181adb5ab472a52075f393Fixed94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26
Affected versions
v5.*
v5.14
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.61
v5.15.62
v5.15.63
v5.15.64
v5.15.65
v5.15.66
v5.15.67
v5.15.68
v5.15.69
v5.15.7
v5.15.70
v5.15.71
v5.15.72
v5.15.73
v5.15.74
v5.15.75
v5.15.76
v5.15.77
v5.15.78
v5.15.79
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "eprobe_trigger_func",
"file": "kernel/trace/trace_eprobe.c"
},
"id": "CVE-2022-49798-22e5b7ee",
"digest": {
"length": 156.0,
"function_hash": "71417661970160297993008039903604997902"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94eedf3dded5fb472ce97bfaf3ac1c6c29c35d26",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "kernel/trace/trace_eprobe.c"
},
"id": "CVE-2022-49798-3497bd68",
"digest": {
"threshold": 0.9,
"line_hashes": [
"110311584173714682137662094261834425186",
"300971061207679708651246679049260396467",
"61880701864982219477554946961388958724"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73f5191467ffe3af82f27fe0ea6a8c2fac724d3f",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "eprobe_trigger_func",
"file": "kernel/trace/trace_eprobe.c"
},
"id": "CVE-2022-49798-90b88ee1",
"digest": {
"length": 156.0,
"function_hash": "71417661970160297993008039903604997902"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73f5191467ffe3af82f27fe0ea6a8c2fac724d3f",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "kernel/trace/trace_eprobe.c"
},
"id": "CVE-2022-49798-a0c11c28",
"digest": {
"threshold": 0.9,
"line_hashes": [
"110311584173714682137662094261834425186",
"300971061207679708651246679049260396467",
"61880701864982219477554946961388958724"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7291dec4f2d17a2d3fd1f789fb41e58476539f21",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "eprobe_trigger_func",
"file": "kernel/trace/trace_eprobe.c"
},
"id": "CVE-2022-49798-b56a0d56",
"digest": {
"length": 156.0,
"function_hash": "71417661970160297993008039903604997902"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7291dec4f2d17a2d3fd1f789fb41e58476539f21",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "kernel/trace/trace_eprobe.c"
},
"id": "CVE-2022-49798-f72a9dca",
"digest": {
"threshold": 0.9,
"line_hashes": [
"110311584173714682137662094261834425186",
"300971061207679708651246679049260396467",
"61880701864982219477554946961388958724"
]
},
"signature_type": "Line"
}
]