A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.4.197/5.10.120/5.15.45/5.17.13/5.18.2. Affected is the function bfq_merge_bio. The manipulation leads to use after free.

This vulnerability is traded as CVE-2022-49413. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.