CVE-2022-49410

A double-free vulnerability has been identified within the Linux kernel. This issue arises from a sequence of function calls involving create_hist_field(), init_var_ref(), and destroy_hist_field(). Specifically, init_var_ref() allocates memory for fields within a variable (ref_field->system). However, if an error occurs within init_var_ref(), these newly allocated fields are prematurely freed. Subsequently, the calling function invokes destroy_hist_field() as part of its error handling routine. This function then attempts to free the same fields, along with the variable itself, resulting in a double-free condition. Successful exploitation can lead to memory corruption and potentially a denial-of-service.

The requirement for administrator-level privileges to trigger this issue decreases the associated risk for standard user accounts. Access to the affected kernel debugging and tracing interfaces is intentionally restricted, thereby limiting the potential for widespread exploitation or compromise by unprivileged users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.