CVE-2022-48960: linux Use After Free
CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2022-48960DEBIAN-CVE-2022-48960
Published 21-10-2024Last modified 05-08-2026
Vulnerability summary
CVE-2022-48960 is a high (CVSS 8.8) Use After Free vulnerability in linux. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 25.2% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.1 (CVE.org)EPSS score
0.33%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 10 · Related 10Timeline
- 21-10-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 8.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.8–8.8
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
25%
Versus all other CVEs
30-day change
0.00 pp
From 0.33% on 21-09-2026
21-09-202621-10-2026
EPSS score0.33%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu113 products
- linuxAll versions (No fix recorded) | < 4.15.0-206.217 | < 5.4.0-144.161 | < 5.15.0-67.74
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 4.15.0-1151.164 | < 5.4.0-1097.105 | < 5.15.0-1031.35
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < 179499e7a240b2ef590f05eb379c810c26bbc8a4 | ≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < 8067cd244cea2c332f8326842fd10158fa2cb64f | ≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < 3a4eddd1cb023a71df4152fcc76092953e6fe95a | ≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < 1b6360a093ab8969c91a30bb58b753282e2ced4c | ≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < 93aaa4bb72e388f6a4887541fd3d18b84f1b5ddc | ≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < b8ce0e6f9f88a6bb49d291498377e61ea27a5387 | ≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < b6307f7a2fc1c5407b6176f2af34a95214a8c262 | ≥ 57c5bc9ad7d799e9507ba6e993398d2c55f03fab, < 433c07a13f59856e4585e89e86b7d4cc59348fab | 3.16
- linux_kernel≥ 3.16, < 4.9.336 | ≥ 4.10, < 4.14.302 | ≥ 4.15, < 4.19.269 | ≥ 4.20, < 5.4.227 | ≥ 5.5, < 5.10.159 | ≥ 5.11, < 5.15.83 | ≥ 5.16, < 6.0.13 | 6.1:rc1 | 6.1:rc2 | 6.1:rc3 | 6.1:rc4 | 6.1:rc5 | 6.1:rc6 | 6.1:rc7 | 6.1:rc8
Debian1 product
- linux< 6.1.4-1
3 vendors · 116 products
