CVE-2022-48964
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
ravb: Fix potential use-after-free in ravb_rx_gbeth()
The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 1c59eb678cbd8d322d06d3a5514d36e8e1a4e84c < e63c681494dcc0527c625a0a4f59bf10259f5ee0 | affected |
| Linux | Linux | 1c59eb678cbd8d322d06d3a5514d36e8e1a4e84c < 5a5a3e564de6a8db987410c5c2f4748d50ea82b8 | affected |
| Linux | Linux | 5.16 | affected |
| Linux | Linux | 0 < 5.16 | unaffected |
| Linux | Linux | 6.0.13 <= 6.0.* | unaffected |
| Linux | Linux | 6.1 <= * | unaffected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://git.kernel.org/stable/c/e63c681494dcc0527c625a0a4f59bf10259f5ee0
- https://git.kernel.org/stable/c/5a5a3e564de6a8db987410c5c2f4748d50ea82b8
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.