vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-49182

net: hns3: add vlan list lock to protect vlan list

HIGH
7.8
CVSS Score
Published: February 26, 2025 at 01:55 AM UTC
Updated: August 5, 2026 at 09:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to protect vlan list When adding port base VLAN, vf VLAN need to remove from HW and modify the vlan state in vf VLAN list as false. If the periodicity task is freeing the same node, it may cause "use after free" error. This patch adds a vlan list lock to protect the vlan list.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.1 ≤ v < 5.15.335.1 ≤ v < 5.16.195.1 ≤ v < 5.17.25.1 ≤ v < 5.185.16 ≤ v < 5.16.195.17 ≤ v < 5.17.25.1c6075b193462d9a3930fb41f587f94720658752a
Vendor states this is fixed in 09e383ca97e798f9954189b741af54b5c51e7a97 (fixed)
Vendor states this is fixed in 1932a624ab88ff407d1a1d567fe581faa15dc725 (fixed)
Vendor states this is fixed in 30f0ff7176efe8ac6c55f85bce26ed58bb608758 (fixed)
Vendor states this is fixed in f58af41deeab0f45c9c80adf5f2de489ebbac3dd (fixed)
Vendor states this is fixed in 5.1 (unaffected)
Vendor states this is fixed in 5.15.33 (unaffected)
Vendor states this is fixed in 5.16.19 (unaffected)
Vendor states this is fixed in 5.17.2 (unaffected)
Vendor states this is fixed in 5.18 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/09e383ca97e798f9954189b741af54b5c51e7a97
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1932a624ab88ff407d1a1d567fe581faa15dc725
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/30f0ff7176efe8ac6c55f85bce26ed58bb608758
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f58af41deeab0f45c9c80adf5f2de489ebbac3dd

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusANALYZED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card