PT-2024-11800 · Linux+7 · Linux Kernel+7

Dan Aloni · Published 2022-01-25 · Updated 2025-09-29 · CVE-2022-48773

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns a problem in the Linux kernel where pointer dereferences occur in error cases of rpcrdma ep create. If failures happen, non-NULL pointers should not be left with the error value; otherwise, rpcrdma ep destroy gets confused and attempts to free them, resulting in an error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:8856

ALSA-2024:8870

ALSA-2025_16880

BDU:2025-14257

CESA-2024_8856

CESA-2024_8870

CVE-2022-48773

INFSA-2024_8856

INFSA-2024_8870

OPENSUSE-SU-2024_2947-1

RHSA-2024:10262

RHSA-2024:10265

RHSA-2024:10275

RHSA-2024:6990

RHSA-2024:6991

RHSA-2024:8616

RHSA-2024:8856

RHSA-2024:8870

RHSA-2024_8856

RHSA-2024_8870

RLSA-2024:8856

RLSA-2024:8870

SUSE-SU-2024:2894-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2947-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

References · 1359

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48773.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48773 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48773 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48773 · Vendor Advisory
• https://git.kernel.org/stable/c/1e7433fb95ccc01629a5edaa4ced0cd8c98d0ae0 · Patch
• https://git.kernel.org/stable/c/2526d4d8b209dc5ac1fbeb468149774888b2a141 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48773 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-8856.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14257 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2929-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a9c10b5b3b67b3750a10c8b089b2e05f5e176e33 · Patch
• https://osv.dev/vulnerability/ALSA-2024:8870 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:8856 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2894-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48773 · Security Note