PT-2024-10524 · Linux+3 · Linux Kernel+3
Rafael Richter
·
Published
2022-02-08
·
Updated
2025-01-20
·
CVE-2022-48818
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The vulnerability is related to the net component of the Linux kernel and is caused by incorrect handling of errors. Specifically, the issue arises when the
mdiobus free() function is called from devm mdiobus free(), leading to a panic due to the mdiobus not being previously unregistered. This occurs when the DSA master is on a bus that calls ->remove from ->shutdown, resulting in a device link between the switch and the DSA master, and device links unbind consumers() unbinding the Marvell switch driver on shutdown. The vulnerability can cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse