7.8

CVE-2022-48658: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.

Modified
AliasesUBUNTU-CVE-2022-48658DEBIAN-CVE-2022-48658
Published 28-04-2024Last modified 05-08-2026

Vulnerability summary

CVE-2022-48658 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 52.1% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 7.5 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
0.67%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 3
SUSE-SU-2024:1644-1SUSE-SU-2024:1659-1SUSE-SU-2024:1663-1

Timeline

  1. 28-04-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. Commit 5a836bf6b09f ("mm: slub: move flush_cpu_slab() invocations __free_slab() invocations out of IRQ context") moved all flush_cpu_slab() invocations to the global workqueue to avoid a problem related with deactivate_slab()/__free_slab() being called from an IRQ context on PREEMPT_RT kernels. When the flush_all_cpu_locked() function is called from a task context it may happen that a workqueue with WQ_MEM_RECLAIM bit set ends up flushing the global workqueue, this will cause a dependency issue. workqueue: WQ_MEM_RECLAIM nvme-delete-wq:nvme_delete_ctrl_work [nvme_core] is flushing !WQ_MEM_RECLAIM events:flush_cpu_slab WARNING: CPU: 37 PID: 410 at kernel/workqueue.c:2637 check_flush_dependency+0x10a/0x120 Workqueue: nvme-delete-wq nvme_delete_ctrl_work [nvme_core] RIP: 0010:check_flush_dependency+0x10a/0x120[ 453.262125] Call Trace: __flush_work.isra.0+0xbf/0x220 ? __queue_work+0x1dc/0x420 flush_all_cpus_locked+0xfb/0x120 __kmem_cache_shutdown+0x2b/0x320 kmem_cache_destroy+0x49/0x100 bioset_exit+0x143/0x190 blk_release_queue+0xb9/0x100 kobject_cleanup+0x37/0x130 nvme_fc_ctrl_free+0xc6/0x150 [nvme_fc] nvme_free_ctrl+0x1ac/0x2b0 [nvme_core] Fix this bug by creating a workqueue for the flush operation with the WQ_MEM_RECLAIM bit set.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.67%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.67% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu85 products
  • linux< 5.15.0-57.63
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1027.31
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 5a836bf6b09f99ead1b69457ff39ab3011ece57b, < 61703b248be993eb4997b00ae5d3318e6d8f3c5b | ≥ 5a836bf6b09f99ead1b69457ff39ab3011ece57b, < df6cb39335cf5a1b918e8dbd8ba7cd9f1d00e45a | ≥ 5a836bf6b09f99ead1b69457ff39ab3011ece57b, < e45cc288724f0cfd497bb5920bcfa60caa335729 | 5.15
  • linux_kernel> 5.15, < 5.15.71 | > 5.16, < 5.19.12
Debian1 product
  • linux< 6.0.2-1

3 vendors · 88 products

References

7 links