CVE-2022-48962: linux Use After Free
CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2022-48962DEBIAN-CVE-2022-48962
Published 21-10-2024Last modified 05-08-2026
Vulnerability summary
CVE-2022-48962 is a high (CVSS 8.8) Use After Free vulnerability in linux. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 25.2% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.1 (CVE.org)EPSS score
0.33%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 10 · Related 10Timeline
- 21-10-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 8.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.8–8.8
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
25%
Versus all other CVEs
30-day change
0.00 pp
From 0.33% on 21-09-2026
21-09-202621-10-2026
EPSS score0.33%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu112 products
- linux< 4.15.0-206.217 | < 5.4.0-144.161 | < 5.15.0-67.74
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.15.0-1151.164 | < 5.4.0-1097.105 | < 5.15.0-1031.35
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < 3501da8eb6d0f5f114a09ec953c54423f6f35885 | ≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < 196e12671cb629d9f3b77b4d8bec854fc445533a | ≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < aceec8ab752428d8e151321479e82cc1a40fee2e | ≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < e71a46cc8c9ad75f3bb0e4b361e81f79c0214cca | ≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < 296a50aa8b2982117520713edc1375777a9f8506 | ≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < 6f4798ac9c9e98f41553c4f5e6c832c8860a6942 | ≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < 8595a2db8eb0ffcbb466eb9f4a7507a5ba06ebb9 | ≥ 542ae60af24f02e130e62cb3b7c23163a2350056, < 4640177049549de1a43e9bc49265f0cdfce08cfd | 4.8
- linux_kernel≥ 4.8, < 4.9.336 | ≥ 4.10, < 4.14.302 | ≥ 4.15, < 4.19.269 | ≥ 4.20, < 5.4.227 | ≥ 5.5, < 5.10.159 | ≥ 5.11, < 5.15.83 | ≥ 5.16, < 6.0.13 | 6.1:rc1 | 6.1:rc2 | 6.1:rc3 | 6.1:rc4 | 6.1:rc5 | 6.1:rc6 | 6.1:rc7 | 6.1:rc8
Debian1 product
- linux< 6.1.4-1
3 vendors · 115 products
