CVE-2022-48958 : In the Linux kernel, the following vulnerability has been resolved: ethernet: a

In the Linux kernel, the following vulnerability has been resolved: ethernet: aeroflex: fix potential skb leak in greth_init_rings() The greth_init_rings() function won't free the newly allocated skb when dma_mapping_error() returns error, so add dev_kfree_skb() to fix it. Compile tested only.

Published 2024-10-21 20:15:07

Updated 2024-10-24 20:00:34

Source Linux

View at NVD, CVE.org

Products affected by CVE-2022-48958

Linux » Linux Kernel
Versions from including (>=) 4.15 and before (<) 4.19.269
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.16 and before (<) 6.0.13
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5 and before (<) 5.10.159
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.20 and before (<) 5.4.227
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.11 and before (<) 5.15.83
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 2.6.34 and before (<) 4.9.336
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.10 and before (<) 4.14.302
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC5
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC2
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC1
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC3
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC4
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC6
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC7
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 6.1 Update RC8
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-48958

EPSS FAQ

0.03%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-48958

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST	2024-10-24
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-48958

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-48958

https://git.kernel.org/stable/c/87277bdf2c370ab2d07cfe77dfa9b37f82bbe1e5

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/bfaa8f6c5b84b295dd73b0138b57c5555ca12b1c

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/cb1e293f858e5e1152b8791047ed4bdaaf392189

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/223654e2e2c8d05347cd8e300f8d1ec6023103dd

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/c7adcbd0fd3fde1b19150c3e955fb4a30c5bd9b7

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/dd62867a6383f78f75f07039394aac25924a3307

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/063a932b64db3317ec020c94466fe52923a15f60

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/99669d94ce145389f1d6f197e6e18ed50d43fb76

ethernet: aeroflex: fix potential skb leak in greth_init_rings() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch

Jump to

Vulnerability Details : CVE-2022-48958

Products affected by CVE-2022-48958

Exploit prediction scoring system (EPSS) score for CVE-2022-48958

CVSS scores for CVE-2022-48958

CWE ids for CVE-2022-48958

References for CVE-2022-48958