CVE-2022-49811: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drbd: use after free in drbd_create_device() The drbd_destroy_connection() frees the "connection" so use the _safe() iterator to prevent a use after free.

Affected products

• Linux Linux Kernel: from 3.15, before 4.14.300 (fixed in 4.14.300); from 4.15, before 4.19.267 (fixed in 4.19.267); from 4.20, before 5.4.225 (fixed in 5.4.225); from 5.5, before 5.10.156 (fixed in 5.10.156); from 5.11, before 5.15.80 (fixed in 5.15.80); from 5.16, before 6.0.10 (fixed in 6.0.10); …

Published 2025-05-01. Last modified 2026-06-17.