A vulnerability classified as critical has been found in Linux Kernel up to 5.18.3. Affected is the function ubi_create_volume. The manipulation of the argument eba_tbl leads to use after free.

This vulnerability is traded as CVE-2022-49388. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.