CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
In the Linux kernel, the following vulnerability has been resolved:
net: hisilicon: Fix potential use-after-free in hisifemacrx()
The skb is delivered to napigroreceive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48962?
CVE-2022-48962 has a severity rating of medium due to the potential for use-after-free vulnerabilities in the Linux kernel.
How do I fix CVE-2022-48962?
To fix CVE-2022-48962, update your Linux kernel to a version that is not affected by this vulnerability.
Which Linux kernel versions are affected by CVE-2022-48962?
CVE-2022-48962 affects various versions of the Linux kernel between 4.8 and 6.1-rc8.
What is a use-after-free vulnerability in CVE-2022-48962?
A use-after-free vulnerability in CVE-2022-48962 occurs when a program continues to use memory after it has been freed, potentially leading to memory corruption.
Can CVE-2022-48962 be exploited remotely?
Yes, CVE-2022-48962 can potentially be exploited remotely if an attacker can manipulate network traffic handled by the affected kernel.