PT-2022-7471 · Linux+3 · Linux Kernel+3
Moshe Shemesh
·
Published
2022-03-09
·
Updated
2024-09-16
·
CVE-2022-48858
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a race condition in the net/mlx5 component of the Linux kernel, which can lead to a refcount use after free warning. This occurs when one command releases its last refcount and frees its index and entry, while another process running the command flush flow takes a refcount to this command entry. The process handling commands flush may see this command as needed to be flushed if the other process released its refcount but didn't release the index yet. The fix involves adding a needed spin lock to resolve the race condition.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse