A vulnerability classified as critical has been found in Linux Kernel up to 5.10.126/5.15.50/5.18.7. Affected is the function cancel_work_sync. The manipulation leads to use after free.

This vulnerability is traded as CVE-2022-49696. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.