CVE-2022-48745

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48745

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use del_timer_sync in fw reset flow of halting poll Substitute del_timer() with del_timer_sync() in fw reset polling deactivation flow, in order to prevent a race condition which occurs when del_timer() is called and timer is deactivated while another process is handling the timer interrupt. A situation that led to the following call trace: RIP: 0010:run_timer_softirq+0x137/0x420 <IRQ> recalibrate_cpu_khz+0x10/0x10 ktime_get+0x3e/0xa0 ? sched_clock_cpu+0xb/0xc0 __do_softirq+0xf5/0x2ea irq_exit_rcu+0xc1/0xf0 sysvec_apic_timer_interrupt+0x9e/0xc0 asm_sysvec_apic_timer_interrupt+0x12/0x20 </IRQ>

References
Link Resource
https://git.kernel.org/stable/c/2a038dd1d942f8fbc495c58fa592ff24af05f1c2 Patch
https://git.kernel.org/stable/c/3c5193a87b0fea090aa3f769d020337662d87b5e Patch
https://git.kernel.org/stable/c/502c37b033fab7cde3e95a570af4f073306be45e Patch
https://git.kernel.org/stable/c/f895ebeb44d09d02674cfdd0cfc2bf687603918c Patch
https://git.kernel.org/stable/c/2a038dd1d942f8fbc495c58fa592ff24af05f1c2 Patch
https://git.kernel.org/stable/c/3c5193a87b0fea090aa3f769d020337662d87b5e Patch
https://git.kernel.org/stable/c/502c37b033fab7cde3e95a570af4f073306be45e Patch
https://git.kernel.org/stable/c/f895ebeb44d09d02674cfdd0cfc2bf687603918c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
History

29 Sep 2025, 17:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
References () https://git.kernel.org/stable/c/2a038dd1d942f8fbc495c58fa592ff24af05f1c2 - () https://git.kernel.org/stable/c/2a038dd1d942f8fbc495c58fa592ff24af05f1c2 - Patch
References () https://git.kernel.org/stable/c/3c5193a87b0fea090aa3f769d020337662d87b5e - () https://git.kernel.org/stable/c/3c5193a87b0fea090aa3f769d020337662d87b5e - Patch
References () https://git.kernel.org/stable/c/502c37b033fab7cde3e95a570af4f073306be45e - () https://git.kernel.org/stable/c/502c37b033fab7cde3e95a570af4f073306be45e - Patch
References () https://git.kernel.org/stable/c/f895ebeb44d09d02674cfdd0cfc2bf687603918c - () https://git.kernel.org/stable/c/f895ebeb44d09d02674cfdd0cfc2bf687603918c - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-362

21 Nov 2024, 07:33

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5: Utilice del_timer_sync en el flujo de desactivación del sondeo de reinicio de fw. Sustituya del_timer() por del_timer_sync() en el flujo de desactivación del sondeo de reinicio de fw, para evitar una condición de ejecución que se produce cuando se llama a del_timer() y el temporizador se desactiva mientras otro proceso maneja la interrupción del temporizador. Una situación que llevó al siguiente seguimiento de llamadas: RIP: 0010:run_timer_softirq+0x137/0x420 recalibrate_cpu_khz+0x10/0x10 ktime_get+0x3e/0xa0 ? sched_clock_cpu+0xb/0xc0 __do_softirq+0xf5/0x2ea irq_exit_rcu+0xc1/0xf0 sysvec_apic_timer_interrupt+0x9e/0xc0 asm_sysvec_apic_timer_interrupt+0x12/0x20
References () https://git.kernel.org/stable/c/2a038dd1d942f8fbc495c58fa592ff24af05f1c2 - () https://git.kernel.org/stable/c/2a038dd1d942f8fbc495c58fa592ff24af05f1c2 -
References () https://git.kernel.org/stable/c/3c5193a87b0fea090aa3f769d020337662d87b5e - () https://git.kernel.org/stable/c/3c5193a87b0fea090aa3f769d020337662d87b5e -
References () https://git.kernel.org/stable/c/502c37b033fab7cde3e95a570af4f073306be45e - () https://git.kernel.org/stable/c/502c37b033fab7cde3e95a570af4f073306be45e -
References () https://git.kernel.org/stable/c/f895ebeb44d09d02674cfdd0cfc2bf687603918c - () https://git.kernel.org/stable/c/f895ebeb44d09d02674cfdd0cfc2bf687603918c -

20 Jun 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-20 12:15

Updated : 2025-09-29 17:27

NVD link : CVE-2022-48745

Mitre link : CVE-2022-48745

CVE.ORG link : CVE-2022-48745

JSON object : View

Products Affected

linux

CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')