U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2022-48742 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() While looking at one unrelated syzbot bug, I found the replay logic in __rtnl_newlink() to potentially trigger use-after-free. It is better to clear master_dev and m_ops inside the loop, in case we have to replay it.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/2cf180360d66bd657e606c1217e0e668e6faa303 CVE, kernel.org Mailing List  Patch 
https://git.kernel.org/stable/c/36a9a0aee881940476b254e0352581401b23f210 CVE, kernel.org Mailing List  Patch 
https://git.kernel.org/stable/c/3bbe2019dd12b8d13671ee6cda055d49637b4c39 CVE, kernel.org Mailing List  Patch 
https://git.kernel.org/stable/c/7d9211678c0f0624f74cdff36117ab8316697bb8 CVE, kernel.org Mailing List  Patch 
https://git.kernel.org/stable/c/a01e60a1ec6bef9be471fb7182a33c6d6f124e93 CVE, kernel.org Mailing List  Patch 
https://git.kernel.org/stable/c/bd43771ee9759dd9dfae946bff190e2c5a120de5 CVE, kernel.org Mailing List  Patch 
https://git.kernel.org/stable/c/c6f6f2444bdbe0079e41914a35081530d0409963 CVE, kernel.org Mailing List  Patch 
https://git.kernel.org/stable/c/def5e7070079b2a214b3b1a2fbec623e6fbfe34a CVE, kernel.org Mailing List  Patch 

Weakness Enumeration

CWE-ID CWE Name Source
CWE-416 Use After Free cwe source acceptance level NIST  

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

3 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2022-48742
NVD Published Date:
06/20/2024
NVD Last Modified:
11/21/2024
Source:
kernel.org