← Back

CVE-2022-48816

nvd nist
Published: Jul 16, 2024Modified: Oct 3, 2026

JSON object

Loading...
4.7
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.0 / Impact: 3.6
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a ("SUNRPC: Check if the xprt is connected before handling sysfs reads") appears to attempt to fix this problem, but it only narrows the race window.

Affected (5)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Linux
5.10.67 ≤ version < 5.11
5.13.19 ≤ version < 5.16.10
Version 5.17 rc1
Version 5.17 rc2
Version 5.17 rc3

References (6)

Timeline

No history available yet.