SECUFOCUSNOW
Home›CVE index›CVE-2022-48697
Review reviewCritical

CVE-2022-48697

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350 Read of size 4 at addr 0000607bd1835943 by task kworker/13:1/460 Workqueue: nvmet-wq nvme_loop_execute_work [nvme_loop] Call Trace: show_stack+0x52/0x58 dump_stack_lvl+0x49/0x5e print_report.cold+0x36/0x1e2 kasan_report+0xb9/0xf0 __asan_load4+0x6b/0x80 blk_mq_complete_request_remote+0xac/0x350 nvme_loop_queue_response+0x1df/0x275 [nvme_loop] __nvme...

CVSS
9.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.05.04
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 9.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350 Read of size 4 at addr 0000607bd1835943 by task kworker/13:1/460 Workqueue: nvmet-wq nvme_loop_execute_work [nvme_loop] Call Trace: show_stack+0x52/0x58 dump_stack_lvl+0x49/0x5e print_report.cold+0x36/0x1e2 kasan_report+0xb9/0xf0 __asan_load4+0x6b/0x80 blk_mq_complete_request_remote+0xac/0x350 nvme_loop_queue_response+0x1df/0x275 [nvme_loop] __nvme...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= a07b4970f464f13640e28e16dad6cfa33647cc99 < 17f121ca3ec6be0fb32d77c7f65362934a38cc8e, >= a07b4970f464f13640e28e16dad6cfa33647cc99 < 8d66989b5f7bb28bba2f8e1e2ffc8bfef4a10717, >= a07b4970f464f13640e28e16dad6cfa33647cc99 < be01f1c988757b95f11f090a9f491365670a522b, >= a07b4970f464f13640e28e16dad6cfa33647cc99 < ebf46da50beb78066674354ad650606a467e33fa, >= a07b4970f464f13640e28e16dad6cfa33647cc99 < 4484ce97a78171668c402e0c45db7f760aea8060, >= a07b4970f464f13640e28e16dad6cfa33647cc99 < 6a02a61e81c231cc5c680c5dbf8665275147ac52, >= 4.8, >= 4.8 < 4.19.260, >= 4.20 < 5.4.213, >= 5.5 < 5.10.143, >= 5.11 < 5.15.68, >= 5.16 < 5.19.9, 6.0
Fixed versions
4.19.260, 5.4.213, 5.10.143, 5.15.68, 5.19.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416