{"id":"CVE-2022-49811","title":"drbd: use after free in drbd_create_device()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrbd: use after free in drbd_create_device()\n\nThe drbd_destroy_connection() frees the \"connection\" so use the _safe()\niterator to prevent a use after free.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < fc1897f16ebcfd22364f2afcc27f53a740f3bc7a","Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1","Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5","Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 9ed51414aef6e59e832e2960f10766dce2d5b1a1","Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 7d93417d596402ddd46bd76c721f205d09d0d025","Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < c2a00b149836d60c222930bbea6b2139caf34d4f","Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < a7a1598189228b5007369a9622ccdf587be0730f","Linux 3.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T19:49:12.335055Z"},"published":"2025-05-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T19:49:50.698Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-49811","references":[{"url":"https://git.kernel.org/stable/c/fc1897f16ebcfd22364f2afcc27f53a740f3bc7a"},{"url":"https://git.kernel.org/stable/c/bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1"},{"url":"https://git.kernel.org/stable/c/813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5"},{"url":"https://git.kernel.org/stable/c/9ed51414aef6e59e832e2960f10766dce2d5b1a1"},{"url":"https://git.kernel.org/stable/c/7d93417d596402ddd46bd76c721f205d09d0d025"},{"url":"https://git.kernel.org/stable/c/c2a00b149836d60c222930bbea6b2139caf34d4f"},{"url":"https://git.kernel.org/stable/c/a7a1598189228b5007369a9622ccdf587be0730f"}],"tags":["cve.org"],"epss":0.00228,"epssPercentile":0.13612,"ingestedAt":"2026-11-05T22:38:31.603Z","slug":"CVE-2022-49811","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrbd: use after free in drbd_create_device()\n\nThe drbd_destroy_connection() frees the \"connection\" so use the _safe()\niterator to prevent a use after free.\n\n## Affected\n\n- `Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < fc1897f16ebcfd22364f2afcc27f53a740f3bc7a`\n- `Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1`\n- `Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5`\n- `Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 9ed51414aef6e59e832e2960f10766dce2d5b1a1`\n- `Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < 7d93417d596402ddd46bd76c721f205d09d0d025`\n- `Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < c2a00b149836d60c222930bbea6b2139caf34d4f`\n- `Linux >= b6f85ef9538b2111a8ba0bbfae9aaebabfc94961 < a7a1598189228b5007369a9622ccdf587be0730f`\n- `Linux 3.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}