Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-48779 Details

Description

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if this is the same as the port's pvid_vlan which we access afterwards, what we're accessing is freed memory. Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior to calling ocelot_vlan_member_del().

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/c98bed60cdd7f22237ae256cc9c1c3087206b8a2	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/ef57640575406f57f5b3393cf57f457b0ace837e	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/c98bed60cdd7f22237ae256cc9c1c3087206b8a2	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/ef57640575406f57f5b3393cf57f457b0ace837e	CVE	Mailing ListPatch

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-416	Use After Free	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 5.16, < 5.16.11
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
Aug 21, 2024	Initial Analysis	[email protected]
Jul 16, 2024	New CVE Received	kernel.org