CVE-2022-48425: High severity Linux Linux kernel vulnerability
Published Mar 19, 2023
·Updated
In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.
Affected Software
8 affected componentsFixes available
Linux Linux kernel<=6.2.7
Linux Linux kernel>=5.15<5.15.113
Linux Linux kernel>=5.16<6.1.33
Linux Linux kernel>=6.2<6.3.4
debian/linux<6.1.37-1
6.1.37-1
debian/linux<6.3.7-1
6.3.7-1
debian/linux<6.3.7-1
6.3.7-1
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Mar 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·03:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-48425?
CVE-2022-48425 is rated as a medium severity vulnerability due to the potential for memory corruption.
2
How do I fix CVE-2022-48425?
To fix CVE-2022-48425, update to a patched version of the Linux kernel that does not contain this vulnerability.
3
What versions of the Linux Kernel are affected by CVE-2022-48425?
CVE-2022-48425 affects Linux Kernel versions from 5.15 to 6.2.7 inclusive.
4
What component is impacted by CVE-2022-48425?
CVE-2022-48425 impacts the fs/ntfs3/inode.c component of the Linux kernel.
5
When was CVE-2022-48425 last updated?
CVE-2022-48425 was last updated on 29 November 2024.