CVE-2022-48670

HighCVSS 7.8/10Last modified Aug 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

peci: cpu: Fix use-after-free in adev_release()

When auxiliary_device_add() returns an error, auxiliary_device_uninit() is called, which causes refcount for device to be decremented and .release callback will be triggered.

Because adev_release() re-calls auxiliary_device_uninit(), it will cause use-after-free: [ 1269.455172] WARNING: CPU: 0 PID: 14267 at lib/refcount.c:28 refcount_warn_saturate+0x110/0x15 [ 1269.464007] refcount_t: underflow; use-after-free.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Linux	Linux	>= 93e1821c80f9460c8931dc4bc090ede794f966cd, < c87f1f99e26ea4ae08cabe753ae98e5626bdba89; >= 93e1821c80f9460c8931dc4bc090ede794f966cd, < 1c11289b34ab67ed080bbe0f1855c4938362d9cf
Linux	Linux	5.18
linux	linux_kernel	-1da177e4c3f4
linux	linux_kernel	—
linux	linux_kernel	—

References

Timeline

Published: May 3, 2024
Last modified: Aug 13, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-486715.5In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() syzbo CVE-2022-486727.8In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes() Commit 78c44d910 CVE-2022-486735.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modif CVE-2022-486747.8In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testi CVE-2022-486755.5In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead CVE-2022-48684.3Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.CVE-2022-486818.8Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions t CVE-2022-486826.0In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.CVE-2022-486837.8An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out CVE-2022-486848.8An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templat CVE-2022-486856.7An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file clean_secbi_old_logs is writable by all users and is exec CVE-2022-486867.8In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail fro