CVE-2022-48695

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Fix use-after-free warning

Fix the following use-after-free warning which is observed during controller reset:

refcount_t: underflow; use-after-free. WARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 146b16c8071f5f6c67895d15beeee1163f5107c4, < b8fc9e91b931215110ba824d1a2983c5f60b6f82; >= 146b16c8071f5f6c67895d15beeee1163f5107c4, < d4959d09b76eb7a4146f5133962b88d3bddb63d6; >= 146b16c8071f5f6c67895d15beeee1163f5107c4, < 82efb917eeb27454dc4c6fe26432fc8f6c75bc16; >= 146b16c8071f5f6c67895d15beeee1163f5107c4, < 5682c94644fde72f72bded6580c38189ffc856b5; >= 146b16c8071f5f6c67895d15beeee1163f5107c4, < ea10a652ad2ae2cf3eced6f632a5c98f26727057; >= 146b16c8071f5f6c67895d15beeee1163f5107c4, < 6229fa494a5949be209bc73afbc5d0a749c2e3c7; >= 146b16c8071f5f6c67895d15beeee1163f5107c4, < 41acb064c4e013808bc7d5fc1b506fa449425b0b; >= 146b16c8071f5f6c67895d15beeee1163f5107c4, < 991df3dd5144f2e6b1c38b8d20ed3d4d21e20b34
LinuxLinux4.4

References

Timeline

Published
May 3, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-486967.1In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the CVE-2022-486979.8In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaintCVE-2022-486985.3In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix memory leak when using debugfs_lookup() When callCVE-2022-486995.5In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in update_sched_domain_debugfs Kuyo reporCVE-2022-48705.3In affected versions of Octopus Deploy it is possible to discover network details via error messageCVE-2022-487017.1In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_inteCVE-2022-487027.8In the Linux kernel, the following vulnerability has been resolved: ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloCVE-2022-487035.5In the Linux kernel, the following vulnerability has been resolved: thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_CVE-2022-487045.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeoCVE-2022-487055.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix crash in chip reset fail In case of drv own fCVE-2022-487065.5In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvf_mgmt_dev leakCVE-2022-487075.5In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix null pointer dereference for resetting decoder Not all