Review reviewHigh

CVE-2022-48686

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted.

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.05.04
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 3f2304f8c6d6ed97849057bd16fee99e434ca796 < 19816a0214684f70b49b25075ff8c402fdd611d3, >= 3f2304f8c6d6ed97849057bd16fee99e434ca796 < 5914fa32ef1b7766fea933f9eed94ac5c00aa7ff, >= 3f2304f8c6d6ed97849057bd16fee99e434ca796 < 13c80a6c112467bab5e44d090767930555fc17a5, >= 3f2304f8c6d6ed97849057bd16fee99e434ca796 < c3eb461aa56e6fa94fb80442ba2586bd223a8886, >= 3f2304f8c6d6ed97849057bd16fee99e434ca796 < 160f3549a907a50e51a8518678ba2dcf2541abea, >= 5.0, >= 5.0 < 5.4.213, >= 5.5 < 5.10.143, >= 5.11 < 5.15.68, >= 5.16 < 5.19.9
Fixed versions
5.4.213, 5.10.143, 5.15.68, 5.19.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416