CVE-2022-48783

In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_put(priv->ds->slave_mii_bus->dev.of_node) should be done before mdiobus_free(priv->ds->slave_mii_bus).

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587d	Mailing List Patch
https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cb	Mailing List Patch
https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005e	Mailing List Patch
https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165	Mailing List Patch
https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587d	Mailing List Patch
https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cb	Mailing List Patch
https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005e	Mailing List Patch
https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165	Mailing List Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel:5.10.101:::::::*
	cpe:2.3:o:linux:linux_kernel:5.15.24:::::::*
	cpe:2.3:o:linux:linux_kernel:5.16.10:::::::*

History

21 Nov 2024, 07:34

Type	Values Removed	Values Added
References	~~() https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587d - Mailing List, Patch~~	() https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587d - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cb - Mailing List, Patch~~	() https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cb - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005e - Mailing List, Patch~~	() https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005e - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165 - Mailing List, Patch~~	() https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165 - Mailing List, Patch

21 Aug 2024, 18:03

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8
First Time		Linux linux Kernel Linux
References	~~() https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587d -~~	() https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587d - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cb -~~	() https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cb - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005e -~~	() https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005e - Mailing List, Patch
References	~~() https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165 -~~	() https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165 - Mailing List, Patch
CPE		cpe:2.3:o:linux:linux_kernel:5.16.10:::::::* cpe:2.3:o:linux:linux_kernel:5.10.101:::::::* cpe:2.3:o:linux:linux_kernel:5.15.24:::::::*
CWE		CWE-416
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: dsa: lantiq_gswip: corregir el use after free en gswip_remove() of_node_put(priv->ds->slave_mii_bus->dev.of_node) debe realizarse antes de mdiobus_free(priv-> ds->slave_mii_bus).

16 Jul 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-07-16 12:15

Updated : 2024-11-21 07:34

NVD link : CVE-2022-48783

Mitre link : CVE-2022-48783

CVE.ORG link : CVE-2022-48783

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-416

Use After Free

7.8 /10