CVE-2022-49149
A race condition in the Linux kernel’s rxrpc call timer can cause the kernel to crash when a call is destroyed while a packet arrives. The flaw can lead to a kernel oops, effectively denying service to the system. The vendor has fixed the issue by adding a reference count to the call structure before starting the timer.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, including versions such as 4.15 and other releases that have not yet incorporated the rxrpc call timer fix.
Real-world impact
An attacker could trigger a kernel crash, causing a denial of service on the affected system.
Why this severity
The CVSS score of 9.8 reflects the high impact of a complete denial of service, the lack of required privileges or user interaction, and the potential for widespread disruption.
What to do about it
- 01Upgrade your Linux kernel to a version that includes the rxrpc call timer fix.
NVD description indicates the issue has been resolved.
Timeline
- Feb 26, 2025 · Feb 26, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.