CVE - CVE-2022-48697

CVE-ID
CVE-2022-48697	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350 Read of size 4 at addr 0000607bd1835943 by task kworker/13:1/460 Workqueue: nvmet-wq nvme_loop_execute_work [nvme_loop] Call Trace: show_stack+0x52/0x58 dump_stack_lvl+0x49/0x5e print_report.cold+0x36/0x1e2 kasan_report+0xb9/0xf0 __asan_load4+0x6b/0x80 blk_mq_complete_request_remote+0xac/0x350 nvme_loop_queue_response+0x1df/0x275 [nvme_loop] __nvmet_req_complete+0x132/0x4f0 [nvmet] nvmet_req_complete+0x15/0x40 [nvmet] nvmet_execute_io_connect+0x18a/0x1f0 [nvmet] nvme_loop_execute_work+0x20/0x30 [nvme_loop] process_one_work+0x56e/0xa70 worker_thread+0x2d1/0x640 kthread+0x183/0x1c0 ret_from_fork+0x1f/0x30
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/17f121ca3ec6be0fb32d77c7f65362934a38cc8e URL:https://git.kernel.org/stable/c/17f121ca3ec6be0fb32d77c7f65362934a38cc8e MISC:https://git.kernel.org/stable/c/4484ce97a78171668c402e0c45db7f760aea8060 URL:https://git.kernel.org/stable/c/4484ce97a78171668c402e0c45db7f760aea8060 MISC:https://git.kernel.org/stable/c/6a02a61e81c231cc5c680c5dbf8665275147ac52 URL:https://git.kernel.org/stable/c/6a02a61e81c231cc5c680c5dbf8665275147ac52 MISC:https://git.kernel.org/stable/c/8d66989b5f7bb28bba2f8e1e2ffc8bfef4a10717 URL:https://git.kernel.org/stable/c/8d66989b5f7bb28bba2f8e1e2ffc8bfef4a10717 MISC:https://git.kernel.org/stable/c/be01f1c988757b95f11f090a9f491365670a522b URL:https://git.kernel.org/stable/c/be01f1c988757b95f11f090a9f491365670a522b MISC:https://git.kernel.org/stable/c/ebf46da50beb78066674354ad650606a467e33fa URL:https://git.kernel.org/stable/c/ebf46da50beb78066674354ad650606a467e33fa
Assigning CNA
kernel.org
Date Record Created
20240503	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240503)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)