Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-48686 Details

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: CISA-ADPCVSS-B:6.2 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/13c80a6c112467bab5e44d090767930555fc17a5 kernel.orgPatch
https://git.kernel.org/stable/c/160f3549a907a50e51a8518678ba2dcf2541abea kernel.orgPatch
https://git.kernel.org/stable/c/19816a0214684f70b49b25075ff8c402fdd611d3 kernel.orgPatch
https://git.kernel.org/stable/c/5914fa32ef1b7766fea933f9eed94ac5c00aa7ff kernel.orgPatch
https://git.kernel.org/stable/c/c3eb461aa56e6fa94fb80442ba2586bd223a8886 kernel.orgPatch

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]
CWE-416Use After FreeCISA-ADP

Affected Products

ProductVersions
linux linux kernel
>= 5.0, < 5.4.213
>= 5.5, < 5.10.143
>= 5.11, < 5.15.68
>= 5.16, < 5.19.9

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

9 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-48686
NVD Published Date:
May 3, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2022-48686 Details - Not Deferred