CVE-2022-48789

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix possible use-after-free in transport error_recovery work

While nvme_tcp_submit_async_event_work is checking the ctrl and queue state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this check is not reliable the error recovery work must flush async_event_work before continuing to destroy the admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and the error recovery handler itself changing the ctrl state.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < 61a26ffd5ad3ece456d74c4c79f7b5e3f440a141; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < e192184cf8bce8dd55d619f5611a2eaba996fa05; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < 5e42fca37ccc76f39f73732661bd47254cad5982; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < bb0d8fb35c4ff00a503c2c4dca4cce8d102a21c4; >= 3f2304f8c6d6ed97849057bd16fee99e434ca796, < ff9fc7ebf5c06de1ef72a69f9b1ab40af8b07f9e
LinuxLinux5.0

References

Timeline

Published
Jul 16, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-48797.5A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknCVE-2022-487907.0In the Linux kernel, the following vulnerability has been resolved: nvme: fix a possible use-after-free in controller reset during load UnCVE-2022-487917.8In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sas_task Currently a CVE-2022-487927.8In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task CurrentlCVE-2022-487935.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration TurnCVE-2022-487945.5In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upon error the ieee8021CVE-2022-487955.5In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sba_unmap_sg Rolf Eike Beer reported the CVE-2022-487967.8In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported thCVE-2022-487975.5In the Linux kernel, the following vulnerability has been resolved: mm: don't try to NUMA-migrate COW pages that have other uses Oded GabbCVE-2022-487985.5In the Linux kernel, the following vulnerability has been resolved: s390/cio: verify the driver availability for path_event call If no driCVE-2022-487995.5In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruptCVE-2022-48809.8A vulnerability was found in stakira OpenUtau. It has been classified as critical. This affects the function VoicebankInstaller of the file
CVE-2022-48789: High severity, CVSS 7.8 | Vulnix