CVE - CVE-2022-48962

CVE-ID
CVE-2022-48962	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/196e12671cb629d9f3b77b4d8bec854fc445533a URL:https://git.kernel.org/stable/c/196e12671cb629d9f3b77b4d8bec854fc445533a MISC:https://git.kernel.org/stable/c/296a50aa8b2982117520713edc1375777a9f8506 URL:https://git.kernel.org/stable/c/296a50aa8b2982117520713edc1375777a9f8506 MISC:https://git.kernel.org/stable/c/3501da8eb6d0f5f114a09ec953c54423f6f35885 URL:https://git.kernel.org/stable/c/3501da8eb6d0f5f114a09ec953c54423f6f35885 MISC:https://git.kernel.org/stable/c/4640177049549de1a43e9bc49265f0cdfce08cfd URL:https://git.kernel.org/stable/c/4640177049549de1a43e9bc49265f0cdfce08cfd MISC:https://git.kernel.org/stable/c/6f4798ac9c9e98f41553c4f5e6c832c8860a6942 URL:https://git.kernel.org/stable/c/6f4798ac9c9e98f41553c4f5e6c832c8860a6942 MISC:https://git.kernel.org/stable/c/8595a2db8eb0ffcbb466eb9f4a7507a5ba06ebb9 URL:https://git.kernel.org/stable/c/8595a2db8eb0ffcbb466eb9f4a7507a5ba06ebb9 MISC:https://git.kernel.org/stable/c/aceec8ab752428d8e151321479e82cc1a40fee2e URL:https://git.kernel.org/stable/c/aceec8ab752428d8e151321479e82cc1a40fee2e MISC:https://git.kernel.org/stable/c/e71a46cc8c9ad75f3bb0e4b361e81f79c0214cca URL:https://git.kernel.org/stable/c/e71a46cc8c9ad75f3bb0e4b361e81f79c0214cca
Assigning CNA
kernel.org
Date Record Created
20240822	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240822)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.