PT-2024-10515 · Linux+3 · Linux Kernel+3

Dan Carpenter · Published 2022-02-11 · Updated 2025-09-24 · CVE-2022-48801

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to incorrect error handling in the Linux kernel's iio component, specifically in the IIO BUFFER GET FD IOCTL function. When the kernel fails to copy a file descriptor to userland, it attempts to clean up by putting back the file descriptor and freeing related resources. However, this cleanup process is incorrect, as it uses put unused fd() on a file descriptor that has already been published, leading to a partially corrupted state. This allows userland to exploit the vulnerability by abusing the still usable file descriptor and operating on a dangling 'file->private data' pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

CWE-253

Related Identifiers

BDU:2025-01066

CVE-2022-48801

OPENSUSE-SU-2024_2947-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2947-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1234

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48801.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-48801 · Vendor Advisory
• https://git.kernel.org/stable/c/c72ea20503610a4a7ba26c769357d31602769c01 · Patch
• https://cve.org/CVERecord?id=CVE-2022-48801 · Security Note
• https://bdu.fstec.ru/vul/2025-01066 · Security Note
• https://git.kernel.org/stable/c/b7f54894aa7517d2b6c797a499b9f491e9db9083 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2929-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48801 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2894-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://git.kernel.org/stable/c/202071d2518537866d291aa7cf26af54e674f4d4 · Patch
• https://ubuntu.com/security/CVE-2022-48801 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48801 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48801 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2947-1 · Vendor Advisory