CVE-2022-48962

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hisilicon: Fix potential use-after-free in hisi_femac_rx()

The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 542ae60af24f02e130e62cb3b7c23163a2350056, < 3501da8eb6d0f5f114a09ec953c54423f6f35885; >= 542ae60af24f02e130e62cb3b7c23163a2350056, < 196e12671cb629d9f3b77b4d8bec854fc445533a; >= 542ae60af24f02e130e62cb3b7c23163a2350056, < aceec8ab752428d8e151321479e82cc1a40fee2e; >= 542ae60af24f02e130e62cb3b7c23163a2350056, < e71a46cc8c9ad75f3bb0e4b361e81f79c0214cca; >= 542ae60af24f02e130e62cb3b7c23163a2350056, < 296a50aa8b2982117520713edc1375777a9f8506; >= 542ae60af24f02e130e62cb3b7c23163a2350056, < 6f4798ac9c9e98f41553c4f5e6c832c8860a6942; >= 542ae60af24f02e130e62cb3b7c23163a2350056, < 8595a2db8eb0ffcbb466eb9f4a7507a5ba06ebb9; >= 542ae60af24f02e130e62cb3b7c23163a2350056, < 4640177049549de1a43e9bc49265f0cdfce08cfd
LinuxLinux4.8

References

Timeline

Published
Oct 21, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-489635.5In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_mux_init() When failed to alloCVE-2022-489647.8In the Linux kernel, the following vulnerability has been resolved: ravb: Fix potential use-after-free in ravb_rx_gbeth() The skb is delivCVE-2022-489655.5In the Linux kernel, the following vulnerability has been resolved: gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() The noCVE-2022-489667.1In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp-CVE-2022-489677.1In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under COCVE-2022-489685.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential memory leak in otx2_init_tc() In otx2_initCVE-2022-489695.5In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Fix NULL sring after live migration A NAPI is setup for CVE-2022-48976.1The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leCVE-2022-489705.5In the Linux kernel, the following vulnerability has been resolved: af_unix: Get user_ns from in_skb in unix_diag_get_exact(). Wei Chen reCVE-2022-489715.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when bt_init fails bt_init() calls bt_lCVE-2022-489725.5In the Linux kernel, the following vulnerability has been resolved: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() Kernel faCVE-2022-489735.5In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak for_each_pci_dev()
CVE-2022-48962: High severity, CVSS 7.8 | Vulnix