CVE-2022-48816

Advisory lineage Upstream: 0 Downstream: 9
Modified
Published: 16 Jul 2024, 11:44
Last modified:01 Jun 2026, 16:03

Vulnerability Summary

Overall Risk (default)
low
19/100
CVSS Score
4.7 MEDIUM
v3.1 (nvd)
EPSS Score
0.02% LOW
0% probability -0.01%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Jul 2024, 11:44
Published
Vulnerability first disclosed
01 Jun 2026, 16:03
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a ("SUNRPC: Check if the xprt is connected before handling sysfs reads") appears to attempt to fix this problem, but it only narrows the race window.

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 5%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ a8482488a7d6d320f63a9ee1912dbb5ae5b80a61, < fdc42287ae3f8a35cc2098307f52d7864b4bc8ed | ≥ a8482488a7d6d320f63a9ee1912dbb5ae5b80a61, < 9482ab4540f5bcc869b44c067ae99b5fca16bd07 | ≥ a8482488a7d6d320f63a9ee1912dbb5ae5b80a61, < b49ea673e119f59c71645e2f65b3ccad857c90ee | 21a2be1a5145d072deedc7cdc5b2d17380abea75 | 77876473912d1bf1ed16bffa1674e5ff0f499f25 | ≥ 5.10.67, < 5.11 | ≥ 5.13.19, < 5.14 | 5.14

  • linux•linux_kernel

    ≥ 5.10.67, < 5.11 | ≥ 5.13.19, < 5.16.10 | 5.17:rc1 | 5.17:rc2 | 5.17:rc3

References (3)