CVE-2022-48773

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create

If there are failures then we must not leave the non-NULL pointers with the error value, otherwise `rpcrdma_ep_destroy` gets confused and tries free them, resulting in an Oops.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 85cd8e2b78eea7374927750ffec60bf047f8f90b, < 1e7433fb95ccc01629a5edaa4ced0cd8c98d0ae0; >= 85cd8e2b78eea7374927750ffec60bf047f8f90b, < 9921c866dc369577c3ebb9adf2383b01b58c18de; >= 85cd8e2b78eea7374927750ffec60bf047f8f90b, < 2526d4d8b209dc5ac1fbeb468149774888b2a141; >= 85cd8e2b78eea7374927750ffec60bf047f8f90b, < a9c10b5b3b67b3750a10c8b089b2e05f5e176e33
LinuxLinux5.7

References

Timeline

Published
Jul 16, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-487745.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: Fix the error handling path in pt_core_init() In ordCVE-2022-487755.5In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_CVE-2022-487765.5In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doeCVE-2022-487775.5In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the eventCVE-2022-487787.8In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_CVE-2022-487797.8In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlanCVE-2022-48785.3A vulnerability classified as critical has been found in JATOS. Affected is the function ZipUtil of the file modules/common/app/utils/commonCVE-2022-487805.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions ThCVE-2022-487815.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - get rid of alg_memory_allocated alg_memory_allocated CVE-2022-487827.8In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem roCVE-2022-487837.8In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_pCVE-2022-487844.7In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous