In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() While looking at one unrelated syzbot bug, I found the replay logic in __rtnl_newlink() to potentially trigger use-after-free. It is better to clear master_dev and m_ops inside the loop, in case we have to replay it.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/2cf180360d66bd657e606c1217e0e668e6faa303 cve-icon cve-icon
https://git.kernel.org/stable/c/36a9a0aee881940476b254e0352581401b23f210 cve-icon cve-icon
https://git.kernel.org/stable/c/3bbe2019dd12b8d13671ee6cda055d49637b4c39 cve-icon cve-icon
https://git.kernel.org/stable/c/7d9211678c0f0624f74cdff36117ab8316697bb8 cve-icon cve-icon
https://git.kernel.org/stable/c/a01e60a1ec6bef9be471fb7182a33c6d6f124e93 cve-icon cve-icon
https://git.kernel.org/stable/c/bd43771ee9759dd9dfae946bff190e2c5a120de5 cve-icon cve-icon
https://git.kernel.org/stable/c/c6f6f2444bdbe0079e41914a35081530d0409963 cve-icon cve-icon
https://git.kernel.org/stable/c/def5e7070079b2a214b3b1a2fbec623e6fbfe34a cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062003-CVE-2022-48742-6393@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48742 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48742 cve-icon
History

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Aug 2024 14:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-20T11:13:26.653Z

Updated: 2024-09-11T17:34:48.431Z

Reserved: 2024-06-20T11:09:39.054Z

Link: CVE-2022-48742

cve-icon Vulnrichment

Updated: 2024-09-11T12:42:26.012Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-20T12:15:12.517

Modified: 2024-08-20T13:44:57.483

Link: CVE-2022-48742

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2022-48742 - Bugzilla