CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
First published: Mon Oct 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | >=3.16<4.9.336 | |
| Linux kernel | >=4.10<4.14.302 | |
| Linux kernel | >=4.15<4.19.269 | |
| Linux kernel | >=4.20<5.4.227 | |
| Linux kernel | >=5.5<5.10.159 | |
| Linux kernel | >=5.11<5.15.83 | |
| Linux kernel | >=5.16<6.0.13 | |
| Linux kernel | =6.1-rc1 | |
| Linux kernel | =6.1-rc2 | |
| Linux kernel | =6.1-rc3 | |
| Linux kernel | =6.1-rc4 | |
| Linux kernel | =6.1-rc5 | |
| Linux kernel | =6.1-rc6 | |
| Linux kernel | =6.1-rc7 | |
| Linux kernel | =6.1-rc8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/179499e7a240b2ef590f05eb379c810c26bbc8a4
- https://git.kernel.org/stable/c/8067cd244cea2c332f8326842fd10158fa2cb64f
- https://git.kernel.org/stable/c/3a4eddd1cb023a71df4152fcc76092953e6fe95a
- https://git.kernel.org/stable/c/1b6360a093ab8969c91a30bb58b753282e2ced4c
- https://git.kernel.org/stable/c/93aaa4bb72e388f6a4887541fd3d18b84f1b5ddc
- https://git.kernel.org/stable/c/b8ce0e6f9f88a6bb49d291498377e61ea27a5387
- https://git.kernel.org/stable/c/b6307f7a2fc1c5407b6176f2af34a95214a8c262
- https://git.kernel.org/stable/c/433c07a13f59856e4585e89e86b7d4cc59348fab
Frequently Asked Questions
What is the severity of CVE-2022-48960?
CVE-2022-48960 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-48960?
To fix CVE-2022-48960, update the Linux kernel to a version that is not affected, specifically to a version later than the vulnerable releases.
Which versions of the Linux kernel are affected by CVE-2022-48960?
CVE-2022-48960 affects multiple versions of the Linux kernel ranging from 3.16 up to various 6.1 release candidates.
What impact does CVE-2022-48960 have on system security?
CVE-2022-48960 may lead to potential use-after-free conditions, which could result in denial of service or arbitrary code execution.
Is there a workaround for CVE-2022-48960?
There are no known workarounds for CVE-2022-48960, so the best mitigation is to apply the appropriate kernel update.
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/3.16
- version/linux kernel/4.10
- version/linux kernel/4.15
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/6.1-rc1
- version/linux kernel/6.1-rc2
- version/linux kernel/6.1-rc3
- version/linux kernel/6.1-rc4
- version/linux kernel/6.1-rc5
- version/linux kernel/6.1-rc6
- version/linux kernel/6.1-rc7
- version/linux kernel/6.1-rc8