SECUFOCUSNOW
Home›CVE index›CVE-2022-48733
Review reviewHigh

CVE-2022-48733

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:create_snapshot(), we allocate a pending snapshot structure and then attach it to the transaction's list of pending snapshots. After that we call btrfs_commit_transaction(), and if that returns an error we jump to 'fail' label, where we kfree() the pending snapshot structure. This can result in a later use-after-free of the pending snapshot: 1) We allocated the pending snapshot and added it to the transaction's list of pending snapshots; 2) We call btrf...

CVSS
7.8
EPSS
0.23%
13.9% percentile
CISA KEV
Not listed
Published
2024.06.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.23%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:create_snapshot(), we allocate a pending snapshot structure and then attach it to the transaction's list of pending snapshots. After that we call btrfs_commit_transaction(), and if that returns an error we jump to 'fail' label, where we kfree() the pending snapshot structure. This can result in a later use-after-free of the pending snapshot: 1) We allocated the pending snapshot and added it to the transaction's list of pending snapshots; 2) We call btrf...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < 7e4c72dbaf62f8978af8321a24dbd35566d3a78a, >= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < a7b717fa15165d3d9245614680bebc48a52ac05d, >= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < 9372fa1d73da5f1673921e365d0cd2c27ec7adc2, >= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < 28b21c558a3753171097193b6f6602a94169093a, >= 3.7, < 5.10.226, >= 5.11 < 5.15.22, >= 5.16 < 5.16.8, 5.17
Fixed versions
5.10.226, 5.15.22, 5.16.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416