CVE-2022-50697

A flaw was found in the Linux kernel's Multiple Registration Protocol (MRP) module. A local attacker could exploit a use-after-free vulnerability due to a lack of synchronization when a timer is cancelled, potentially allowing the timer to restart. This could lead to a system crash, resulting in a denial of service.

A local attacker can exploit a use-after-free vulnerability in the Linux kernel's Multiple Registration Protocol (MRP) module, potentially leading to a system crash and denial of service. This flaw affects Red Hat Enterprise Linux 7, 8, and 9. Red Hat Enterprise Linux 6, 10, and Red Hat In-Vehicle OS are not affected as the vulnerable code is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.