CVE-2022-48782
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
16/07/2024
Last modified:
21/08/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mctp: fix use after free<br />
<br />
Clang static analysis reports this problem<br />
route.c:425:4: warning: Use of memory after it is freed<br />
trace_mctp_key_acquire(key);<br />
^~~~~~~~~~~~~~~~~~~~~~~~~~~<br />
When mctp_key_add() fails, key is freed but then is later<br />
used in trace_mctp_key_acquire(). Add an else statement<br />
to use the key only when mctp_key_add() is successful.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.16.11 (excluding) |
To consult the complete list of CPE names with products and versions, see this page