CVE-2022-48686

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix UAF when detecting digest errors

We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < 19816a0214684f70b49b25075ff8c402fdd611d3; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < 5914fa32ef1b7766fea933f9eed94ac5c00aa7ff; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < 13c80a6c112467bab5e44d090767930555fc17a5; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < c3eb461aa56e6fa94fb80442ba2586bd223a8886; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < 160f3549a907a50e51a8518678ba2dcf2541abea
LinuxLinux5.0

References

Timeline

Published
May 3, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-486875.5In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layeCVE-2022-486885.5In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during module removal The driver incorrectly frCVE-2022-486897.0In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syCVE-2022-48697.5A vulnerability was found in Evolution Events Artaxerxes. It has been declared as problematic. This vulnerability affects unknown code of thCVE-2022-486905.5In the Linux kernel, the following vulnerability has been resolved: ice: Fix DMA mappings leak Fix leak, when user changes ring parametersCVE-2022-486915.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clean up hook list when offload flags check failsCVE-2022-486925.5In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd->result only when scmnd is not NULL This change fiCVE-2022-486935.5In the Linux kernel, the following vulnerability has been resolved: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs In brcmsCVE-2022-486947.8In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix drain SQ hang with no completion SW generated completiCVE-2022-486957.8In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning Fix the following use-after-CVE-2022-486967.1In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the CVE-2022-486979.8In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint
CVE-2022-48686: High severity, CVSS 7.8 | Vulnix