Use-After-Free Vulnerability in Linux Kernel Affecting Dynamic ftrace Operations

CVE-2022-49892

Summary

A use-after-free vulnerability was identified in the Linux kernel's handling of dynamic ftrace operations. This flaw arises when two operations with identical content are registered successively. Upon unregistering the second operation, the expected synchronization steps are bypassed, potentially allowing another CPU to access released memory. This could lead to unintended behavior or access violations. The issue has been mitigated by adding the necessary synchronization mechanisms during the ftrace shutdown process.

References