CVE-2022-48773: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
In the Linux kernel, the following vulnerability has been resolved:
xprtrdma: fix pointer derefs in error cases of rpcrdmaepcreate
If there are failures then we must not leave the non-NULL pointers with the error value, otherwise rpcrdmaepdestroy gets confused and tries free them, resulting in an Oops.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.102 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.25 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.16.11 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.17 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.16.11-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48773?
CVE-2022-48773 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-48773?
To fix CVE-2022-48773, you need to update the Linux kernel to versions 5.10.102, 5.15.25, 5.16.11, or 5.17.
Which Linux kernel versions are affected by CVE-2022-48773?
CVE-2022-48773 affects Linux kernel versions prior to 5.10.102, between 5.11 and 5.15.25, and between 5.16.0 and 5.16.11.
What specific component does CVE-2022-48773 affect?
CVE-2022-48773 affects the xprtrdma component in the Linux kernel.
What is the impact of CVE-2022-48773?
The impact of CVE-2022-48773 may lead to confusion in pointer dereferencing during error handling in the rpcrdma_ep_create function.