CVE-2022-49377

A use-after-free vulnerability was found in the blk_mq_get_sq_hctx function in the Linux kernel's block multiqueue (blk-mq) subsystem. This issue occurs when the function accesses the tagset pointer to determine the current default hardware context through mapping. If this access occurs after the tagset has been freed, typically after the queue cleanup process, it can lead to memory corruption. Such corruption may result in system crashes, information leaks, or privilege escalation, depending on how the freed memory is subsequently used.

This vulnerability is evaluated as having a Moderate impact because exploitation requires local access and depends on specific timing during block device queue cleanup, limiting attack consistency. While standard Red Hat Enterprise Linux systems rely on the block multiqueue layer for storage management, triggering the underlying memory cleanup condition normally requires privileged operations associated with device removal or queue teardown. As a result, unprivileged attackers face high barriers to reliably leverage this flaw for privilege escalation or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.