PT-2024-11785 · Linux+2 · Linux Kernel+2

Published 2022-02-01 · Updated 2025-01-13 · CVE-2022-48719

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the neighbor entry turning to NUD FAILED state, where neigh event send() triggered an immediate probe as per commit cd28ca0a3dd1 ("neigh: reduce arp latency") via neigh probe() given table lock was held. This situation can lead to a deadlock for NTF MANAGED entries. The fix adds a parameter to neigh event send() to communicate whether immediate probe is allowed or disallowed. Existing call-sites of neigh event send() default as-is to immediate probe, but neigh managed work() disables it via use of neigh event send probe().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2025-14251

CVE-2022-48719

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48719.json · Exploit
• https://git.kernel.org/stable/c/203a35ebb49cdce377416b0690215d3ce090d364 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-48719 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48719 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48719 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48719 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48719 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14251 · Security Note
• https://ubuntu.com/security/CVE-2022-48719 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48719 · Security Note
• https://git.kernel.org/stable/c/4a81f6da9cb2d1ef911131a6fd8bd15cb61fc772 · Patch
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-1301252 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/4a81f6da9cb2d1ef911131a6fd8bd15cb61fc772 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.8 · Note