PT-2022-7481 · Linux+5 · Linux Kernel+5

Nicolas Cavallari · Published 2022-03-01 · Updated 2025-09-29 · CVE-2022-48915

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a NULL pointer dereference in the thermal core of the Linux kernel. This occurs when the get trip hyst() function is called from thermal genl cmd tz get trip() without checking if the thermal zone defines a trip. The exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2024-06627

CESA-2022_7683

CVE-2022-48915

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3408-1

OPENSUSE-SU-2024_3483-1

RHSA-2022:7683

RHSA-2022_7683

RHSA-2023:2458

RHSA-2023_2458

SUSE-SU-2024:3190-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3227-1

SUSE-SU-2024:3408-1

SUSE-SU-2024:3483-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 673

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48915.json · Exploit
• https://bdu.fstec.ru/vul/2024-06627 · Security Note
• https://git.kernel.org/stable/c/3dafbf915c05f83469e791949b5590da2aca2afb · Patch
• https://git.kernel.org/stable/c/1c0b51e62a50e9291764d022ed44549e65d6ab9c · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48915 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3408-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3190-1 · Vendor Advisory
• https://git.kernel.org/stable/c/5838a14832d447990827d85e90afe17e6fb9c175 · Patch
• https://git.kernel.org/stable/c/4c294285cec3964b3291772ac0642c2bf440bd1b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48915 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48915 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48915 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48915 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3227-1 · Vendor Advisory