CVE-2022-48964: ravb: Fix potential use-after-free in ravb_rx_gbeth()
In the Linux kernel, the following vulnerability has been resolved:
ravb: Fix potential use-after-free in ravbrxgbeth()
The skb is delivered to napigroreceive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the Linux kernel fix for “ravb: Fix potential use-after-free in ravb_rx_gbeth()” to prevent a use-after-free caused by skb being freed after delivery to napi_gro_receive() before dereferencing.
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48964?
CVE-2022-48964 is considered a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-48964?
To fix CVE-2022-48964, you should upgrade to a patched version of the Linux kernel that addresses this vulnerability.
What versions of Linux kernel are affected by CVE-2022-48964?
CVE-2022-48964 affects Linux kernel versions from 5.16 to 6.0.13 and specific release candidates of version 6.1.
What type of vulnerability is CVE-2022-48964?
CVE-2022-48964 is a use-after-free vulnerability that could lead to potential memory corruption.
Can CVE-2022-48964 be exploited remotely?
CVE-2022-48964 may be exploited locally, but it requires specific conditions to trigger the use-after-free scenario.