CVE-2022-49799: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49799 is a vulnerability discovered in the Linux kernel's tracing subsystem, specifically in the register_synth_event() function. The vulnerability was disclosed on May 1, 2025, affecting the Linux kernel's tracing functionality (NVD, Wiz).

The vulnerability occurs when set_synth_event_print_fmt() fails in the register_synth_event() function, causing both trace_remove_event_call() and unregister_trace_event() to be called. This results in the trace_event_call executing __unregister_trace_event() twice. The second unregister operation leads to wild-memory-access. The vulnerability has been assigned a CVSS v3.1 base score of 5.5, indicating moderate severity (Red Hat).

The vulnerability can result in wild-memory-access in the Linux kernel, potentially causing system instability or crashes. This is evidenced by reported general protection faults and KASAN (Kernel Address Sanitizer) warnings indicating potential memory corruption (NVD).

The vulnerability has been addressed by implementing a check to prevent the second call to __unregister_trace_event() when the first one has already been executed. Red Hat Enterprise Linux 9 has deferred the fix for both kernel and kernel-rt packages (Red Hat).