CVE-2022-4744: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

• Linux Linux Kernel: from 5.5, before 5.10.136 (fixed in 5.10.136); from 5.11, before 5.15.12 (fixed in 5.15.12)

Published 2023-03-30. Last modified 2026-06-17.