Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-48911 Details

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0. On failure, we cannot queue the packet and need to indicate an error. The packet will be dropped by the caller. v2: split skb prefetch hunk into separate change

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/21b27b2baa27423286e9b8d3f0b194d587083d95 kernel.orgPatch
https://git.kernel.org/stable/c/34dc4a6a7f261736ef7183868a5bddad31c7f9e3 kernel.orgPatch
https://git.kernel.org/stable/c/43c25da41e3091b31a906651a43e80a2719aa1ff kernel.orgPatch
https://git.kernel.org/stable/c/4d05239203fa38ea8a6f31e228460da4cb17a71a kernel.orgPatch
https://git.kernel.org/stable/c/c3873070247d9e3c7a6b0cf9bf9b45e8018427b1 kernel.orgPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 2.6.29, < 4.9.305
>= 4.10, < 4.14.270
>= 4.15, < 4.19.233
>= 4.20, < 5.4.183
>= 5.5, < 5.10.104

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.17:rc6:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-48911
NVD Published Date:
Aug 22, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2022-48911 Details - Not Deferred