A vulnerability classified as critical has been found in Linux Kernel up to 5.10.109/5.15.32/5.16.18/5.17.1. This affects the function kfree_sensitive(ctx_p->user.key) of the component cc_cipher_exit. The manipulation leads to use after free.

This vulnerability is uniquely identified as CVE-2022-49258. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.