CVE-2022-48784

MEDIUM EPSS 6.7%
Published Jul 16, 20241y ago · Modified Jun 17, 20261w ago
4.7 CVSS 3.1
Medium
Find Similar
Published Jul 16, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the deadlock left a race where the exact same deadlock (see the original commit referenced below) can still happen if cfg80211_destroy_ifaces() already runs while nl80211_netlink_notify() is still marking some interfaces as nl_owner_dead. The race happens because we have two loops here - first we dev_close() all the netdevs, and then we destroy them. If we also have two netdevs (first one need only be a wdev though) then we can find one during the first iteration, close it, and go to the second iteration -- but then find two, and try to destroy also the one we didn't close yet. Fix this by only iterating once.

CVSS Details

Base Score
4.7
Exploitability
1.0
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
6.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-362

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥5.12.1  –  <5.15.25
linuxlinux_kernel*≥5.16  –  <5.16.11
linuxlinux_kernel5.17any
linuxlinux_kernel5.17any
linuxlinux_kernel5.17any
linuxlinux_kernel5.17any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/241e633cb379c4f332fc1baf2abec95ec840cbeb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c979f792a2baf6d0f3419587668a1a6eba46a3d2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f0a6fd1527067da537e9c48390237488719948ed
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/241e633cb379c4f332fc1baf2abec95ec840cbeb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c979f792a2baf6d0f3419587668a1a6eba46a3d2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f0a6fd1527067da537e9c48390237488719948ed
    Patch