CVE-2022-48861

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48861

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: vdpa: fix use-after-free on vp_vdpa_remove When vp_vdpa driver is unbind, vp_vdpa is freed in vdpa_unregister_device and then vp_vdpa->mdev.pci_dev is dereferenced in vp_modern_remove, triggering use-after-free. Call Trace of unbinding driver free vp_vdpa : do_syscall_64 vfs_write kernfs_fop_write_iter device_release_driver_internal pci_device_remove vp_vdpa_remove vdpa_unregister_device kobject_release device_release kfree Call Trace of dereference vp_vdpa->mdev.pci_dev: vp_modern_remove pci_release_selected_regions pci_release_region pci_resource_len pci_resource_end (dev)->resource[(bar)].end

References
Link Resource
https://git.kernel.org/stable/c/4b1743bc715a3691a63ac21b349079b07bf1b19e Patch
https://git.kernel.org/stable/c/dc54ba9932aeaaa1a21fe214af1f446593a78274 Patch
https://git.kernel.org/stable/c/eb057b44dbe35ae14527830236a92f51de8f9184 Patch
https://git.kernel.org/stable/c/4b1743bc715a3691a63ac21b349079b07bf1b19e Patch
https://git.kernel.org/stable/c/dc54ba9932aeaaa1a21fe214af1f446593a78274 Patch
https://git.kernel.org/stable/c/eb057b44dbe35ae14527830236a92f51de8f9184 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:34

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4b1743bc715a3691a63ac21b349079b07bf1b19e - Patch () https://git.kernel.org/stable/c/4b1743bc715a3691a63ac21b349079b07bf1b19e - Patch
References () https://git.kernel.org/stable/c/dc54ba9932aeaaa1a21fe214af1f446593a78274 - Patch () https://git.kernel.org/stable/c/dc54ba9932aeaaa1a21fe214af1f446593a78274 - Patch
References () https://git.kernel.org/stable/c/eb057b44dbe35ae14527830236a92f51de8f9184 - Patch () https://git.kernel.org/stable/c/eb057b44dbe35ae14527830236a92f51de8f9184 - Patch

23 Jul 2024, 14:51

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vdpa: corrige el use-after-free en vp_vdpa_remove Cuando el controlador vp_vdpa se desvincula, se libera vp_vdpa en vdpa_unregister_device y luego se elimina la referencia a vp_vdpa->mdev.pci_dev en vp_modern_remove, lo que activa el use-after-free. Rastreo de llamadas de controlador de desvinculación gratuito vp_vdpa: do_syscall_64 vfs_write kernfs_fop_write_iter device_release_driver_internal pci_device_remove vp_vdpa_remove vdpa_unregister_device kobject_release device_release kfree Rastreo de llamadas de desreferencia vp_vdpa->mdev.pci_dev: vp_modern_remove p ci_release_selected_regions pci_release_region pci_resource_len pci_resource_end (dev)->resource[(bar)].end
CWE CWE-416
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/4b1743bc715a3691a63ac21b349079b07bf1b19e - () https://git.kernel.org/stable/c/4b1743bc715a3691a63ac21b349079b07bf1b19e - Patch
References () https://git.kernel.org/stable/c/dc54ba9932aeaaa1a21fe214af1f446593a78274 - () https://git.kernel.org/stable/c/dc54ba9932aeaaa1a21fe214af1f446593a78274 - Patch
References () https://git.kernel.org/stable/c/eb057b44dbe35ae14527830236a92f51de8f9184 - () https://git.kernel.org/stable/c/eb057b44dbe35ae14527830236a92f51de8f9184 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

16 Jul 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-16 13:15

Updated : 2024-11-21 07:34

NVD link : CVE-2022-48861

Mitre link : CVE-2022-48861

CVE.ORG link : CVE-2022-48861

JSON object : View

Products Affected

linux

CWE
CWE-416

Use After Free