CVE-2022-49920

MEDIUM Year: 2022
CVSS v3 Score
4.7
Medium
Weakness Type
CWE-362
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: netlink notifier might race to release objects commit release path is invoked via call_rcu and it runs lockless to release the objects after rcu grace period. The netlink notifier handler might win race to remove objects that the transaction context is still referencing from the commit release path. Call rcu_barrier() to ensure pending rcu callbacks run to completion if the list of transactions to be destroyed is not empty.

Related Vulnerabilities

CVE-2009-4895

MEDIUM
CVSS:4.7(Medium)

Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or po...

CWE-3622009

CVE-2011-3585

MEDIUM
CVSS:4.7(Medium)

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when...

CWE-3622011

CVE-2014-3611

MEDIUM
CVSS:4.7(Medium)

Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash...

CWE-3622014

CVE-2014-5254

MEDIUM
CVSS:4.7(Medium)

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

CWE-3622014

CVE-2014-8086

MEDIUM
CVSS:4.7(Medium)

Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a writ...

CWE-3622014

CVE-2015-1865

MEDIUM
CVSS:4.7(Medium)

fts.c in coreutils 8.4 allows local users to delete arbitrary files.

CWE-3622015