PT-2024-8453 · Linux+3 · Linux Kernel+3

Tianhao Zhao · Published 2022-09-19 · Updated 2025-01-14 · CVE-2022-48648

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference in the efx hard start xmit() function. This can occur when trying to get the channel from the tx queue variable, which is wrong because it can only happen if tx queue is NULL. The error message for this issue includes "BUG: unable to handle kernel NULL pointer dereference" and indicates the problem is in the efx hard start xmit() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-10013

CVE-2022-48648

OESA-2024-2080

OPENSUSE-SU-2024_1641-1

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

SUSE-SU-2024:1641-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1647-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 629

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48648.json · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47292 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42305 · Security Note
• https://git.kernel.org/stable/c/b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-48898 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48686 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42284 · Security Note
• https://ubuntu.com/security/CVE-2022-48648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48899 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48663 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48656 · Security Note
• https://bdu.fstec.ru/vul/2024-10013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48642 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52903 · Security Note