CVE-2022-48638

Advisory lineage Upstream: 0 Downstream: 11
Analyzed
Published: 28 Apr 2024, 12:59
Last modified:11 May 2026, 18:44

Vulnerability Summary

Overall Risk (default)
low
21/100
CVSS Score
5.3 MEDIUM
v3.1 (cve.org)
EPSS Score
0.02% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Apr 2024, 12:59
Published
Vulnerability first disclosed
11 May 2026, 18:44
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS Trends

Current EPSS score: 0.02%• Percentile: 5%

Affected Systems

  • linux•linux

    ≥ 6b658c4863c15936872a93c9ee879043bf6393c9, < 8484a356cee8ce3d6a8e6266ff99be326e9273ad | ≥ 6b658c4863c15936872a93c9ee879043bf6393c9, < 1e9571887f97b17cf3ffe9aa4da89090ea60988b | ≥ 6b658c4863c15936872a93c9ee879043bf6393c9, < df02452f3df069a59bc9e69c84435bf115cb6e37 | 5.14

  • linux•linux_kernel

    ≥ 5.14, < 5.15.72 | ≥ 5.16, < 5.19.12 | 6.0:rc1 | 6.0:rc2 | 6.0:rc3 | 6.0:rc4 | 6.0:rc5 | 6.0:rc6

References (3)