Lucene search

K
redhatcveRedhat.comRH:CVE-2022-48816
HistoryJul 16, 2024 - 10:24 p.m.

CVE-2022-48816

2024-07-1622:24:35
redhat.com
access.redhat.com
3
linux kernel
sunrpc vulnerability
mutex
sysfs read
oops
race window

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.3%

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a (“SUNRPC: Check if the xprt is connected before handling sysfs reads”) appears to attempt to fix this problem, but it only narrows the race window.

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.3%