CVE-2022-48873

HIGH EPSS 15.2%
Published Aug 21, 20241y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Aug 21, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process and device_release Do not remove the map from the list on error path in fastrpc_init_create_process, instead call fastrpc_map_put, to avoid use-after-free. Do not remove it on fastrpc_device_release either, call fastrpc_map_put instead. The fastrpc_free_map is the only proper place to remove the map. This is called only after the reference count is 0.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
15.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 8

VendorProductVersionRange
linuxlinux_kernel*≥5.2  –  <5.4.230
linuxlinux_kernel*≥5.5  –  <5.10.165
linuxlinux_kernel*≥5.11  –  <5.15.90
linuxlinux_kernel*≥5.16  –  <6.1.8
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/193cd853145b63e670bd73740250983af1475330
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/35ddd482345c43d9eec1f3406c0f20a95ed4054b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4b5c44e924a571d0ad07054de549624fbc04e4d7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5bb96c8f9268e2fdb0e5321cbc358ee5941efc15
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/193cd853145b63e670bd73740250983af1475330
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/35ddd482345c43d9eec1f3406c0f20a95ed4054b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4b5c44e924a571d0ad07054de549624fbc04e4d7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5bb96c8f9268e2fdb0e5321cbc358ee5941efc15
    Patch