CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
In the Linux kernel, the following vulnerability has been resolved:
net: hisilicon: Fix potential use-after-free in hix5hd2rx()
The skb is delivered to napigroreceive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48960?
CVE-2022-48960 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-48960?
To fix CVE-2022-48960, update the Linux kernel to a version that is not affected, specifically to a version later than the vulnerable releases.
Which versions of the Linux kernel are affected by CVE-2022-48960?
CVE-2022-48960 affects multiple versions of the Linux kernel ranging from 3.16 up to various 6.1 release candidates.
What impact does CVE-2022-48960 have on system security?
CVE-2022-48960 may lead to potential use-after-free conditions, which could result in denial of service or arbitrary code execution.
Is there a workaround for CVE-2022-48960?
There are no known workarounds for CVE-2022-48960, so the best mitigation is to apply the appropriate kernel update.