Lucene search

416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2022-48773

HistoryJul 16, 2024 - 12:15 p.m.

CVE-2022-48773

2024-07-1612:15:02

CWE-476

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux kernel

vulnerability

xprtrdma

rpcrdma_ep_create

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.0%

JSON

In the Linux kernel, the following vulnerability has been resolved:

xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create

If there are failures then we must not leave the non-NULL pointers with
the error value, otherwise rpcrdma_ep_destroy gets confused and tries
free them, resulting in an Oops.

Affected configurations

Nvd

Node

linuxlinux_kernelRange<5.10.102

linuxlinux_kernelRange5.11–5.15.25

linuxlinux_kernelRange5.16–5.16.11

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

References

git.kernel.org/stable/c/1e7433fb95ccc01629a5edaa4ced0cd8c98d0ae0

git.kernel.org/stable/c/2526d4d8b209dc5ac1fbeb468149774888b2a141

git.kernel.org/stable/c/9921c866dc369577c3ebb9adf2383b01b58c18de

git.kernel.org/stable/c/a9c10b5b3b67b3750a10c8b089b2e05f5e176e33

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.0%

JSON

Related for NVD:CVE-2022-48773