CVE-2022-49811

HIGH
MEDIUM Priority: 0.02 BB Relevance: 41/100
Published: 2025-05-01 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: drbd: use after free in drbd_create_device() The drbd_destroy_connection() frees the "connection" so use the _safe() iterator to prevent a use after free.

Weakness Classification (1)

Affected Software (14)

VendorProductVersion
Linux Linux b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < fc1897f16ebcfd22364f2afcc27f53a740f3bc7a
Linux Linux b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1
Linux Linux b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5
Linux Linux b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 9ed51414aef6e59e832e2960f10766dce2d5b1a1
Linux Linux b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 7d93417d596402ddd46bd76c721f205d09d0d025
Linux Linux b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < c2a00b149836d60c222930bbea6b2139caf34d4f
Linux Linux b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < a7a1598189228b5007369a9622ccdf587be0730f
Linux Linux 3.15
linux linux_kernel 3.15 – 4.14.300
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1
linux linux_kernel 6.1

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.23%
Raw Score 0.002280
Percentile 13.6%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00228
2026-11-05
0.00228

Intelligence Sources

mitre ref →
nvd ref →