PT-2024-11772 · Linux+2 · Linux Kernel+2

Yacan Liu · Published 2022-09-06 · Updated 2026-05-26 · CVE-2022-48673

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0-0607+ #23

Description The Linux kernel has a vulnerability that allows possible access to freed memory in link clear. After modifying the QP to the Error state, all RX WR would be completed with WC in IB WC WR FLUSH ERR status. The current implementation does not wait for it to be done but destroys the QP and frees the link group directly, resulting in a risk of accessing freed memory in tasklet context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-696

Related Identifiers

AZL-42262

BDU:2025-14250

CVE-2022-48673

OESA-2024-1737

OESA-2024-1738

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

OPENSUSE-SU-2024_2185-1

OPENSUSE-SU-2024_2189-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2011-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2185-1

SUSE-SU-2024:2189-1

SUSE-SU-2025:0231-1

Affected Products

Debian

Linux Kernel

Suse

References · 1439

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48673.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:1659-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36919 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36971 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1738 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35982 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52732 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35937 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36968 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35819 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52791 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48692 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35951 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36960 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:0231-1 · Vendor Advisory