{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"fc1897f16ebcfd22364f2afcc27f53a740f3bc7a","status":"affected","version":"b6f85ef9538b2111a8ba0bbfae9aaebabfc94961","versionType":"git"},{"lessThan":"bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1","status":"affected","version":"b6f85ef9538b2111a8ba0bbfae9aaebabfc94961","versionType":"git"},{"lessThan":"813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5","status":"affected","version":"b6f85ef9538b2111a8ba0bbfae9aaebabfc94961","versionType":"git"},{"lessThan":"9ed51414aef6e59e832e2960f10766dce2d5b1a1","status":"affected","version":"b6f85ef9538b2111a8ba0bbfae9aaebabfc94961","versionType":"git"},{"lessThan":"7d93417d596402ddd46bd76c721f205d09d0d025","status":"affected","version":"b6f85ef9538b2111a8ba0bbfae9aaebabfc94961","versionType":"git"},{"lessThan":"c2a00b149836d60c222930bbea6b2139caf34d4f","status":"affected","version":"b6f85ef9538b2111a8ba0bbfae9aaebabfc94961","versionType":"git"},{"lessThan":"a7a1598189228b5007369a9622ccdf587be0730f","status":"affected","version":"b6f85ef9538b2111a8ba0bbfae9aaebabfc94961","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"3.15"},{"lessThan":"3.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.14.*","status":"unaffected","version":"4.14.300","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.267","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.225","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.156","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.80","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49811","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrbd: use after free in drbd_create_device()\n\nThe drbd_destroy_connection() frees the \"connection\" so use the _safe()\niterator to prevent a use after free.","epss":{"date":"2026-11-05","percentile":0.13639,"score":0.00228},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908190698,"publishedAt":1746108576098,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/fc1897f16ebcfd22364f2afcc27f53a740f3bc7a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/bf47ca1b35fc1f55091ffaff5fbe41ea0c6f59a1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/813a8dd9c45fd46f5cbbfbedf0791afa7740ccf5"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9ed51414aef6e59e832e2960f10766dce2d5b1a1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7d93417d596402ddd46bd76c721f205d09d0d025"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c2a00b149836d60c222930bbea6b2139caf34d4f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a7a1598189228b5007369a9622ccdf587be0730f"}],"remediation":[],"revision":"b4418299e103faf1544834a824925ef7d4d3c7ae1243f9d9921efba8e41482cd","sources":[{"modifiedAt":1793908190698,"name":"CNA: Linux","retrievedAt":1793909444897,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49811"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909452747,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49811"}],"ssvc":{"assessedAt":1793908152335,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"drbd: use after free in drbd_create_device()","updatedAt":1793909452747}