CVE-2022-48695

Summary

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Fix use-after-free warning

Fix the following use-after-free warning which is observed during controller reset:

refcount_t: underflow; use-after-free. WARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0

Affected Software

VendorProductVersion RangeStatus
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < b8fc9e91b931215110ba824d1a2983c5f60b6f82affected
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < d4959d09b76eb7a4146f5133962b88d3bddb63d6affected
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < 82efb917eeb27454dc4c6fe26432fc8f6c75bc16affected
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < 5682c94644fde72f72bded6580c38189ffc856b5affected
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < ea10a652ad2ae2cf3eced6f632a5c98f26727057affected
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < 6229fa494a5949be209bc73afbc5d0a749c2e3c7affected
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < 41acb064c4e013808bc7d5fc1b506fa449425b0baffected
LinuxLinux146b16c8071f5f6c67895d15beeee1163f5107c4 < 991df3dd5144f2e6b1c38b8d20ed3d4d21e20b34affected
LinuxLinux4.4affected
LinuxLinux0 < 4.4unaffected
LinuxLinux4.9.328 <= 4.9.*unaffected
LinuxLinux4.14.293 <= 4.14.*unaffected
LinuxLinux4.19.258 <= 4.19.*unaffected
LinuxLinux5.4.213 <= 5.4.*unaffected
LinuxLinux5.10.143 <= 5.10.*unaffected
LinuxLinux5.15.68 <= 5.15.*unaffected
LinuxLinux5.19.9 <= 5.19.*unaffected
LinuxLinux6.0 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References