Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-48742

rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() While looking at one unrelated syzbot bug, I found the replay logic in __rtnl_newlink() to potentially trigger use-after-free. It is better to clear master_dev and m_ops inside the loop, in case we have to replay it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < 2cf180360d66bd657e606c1217e0e668e6faa303affected
  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < 7d9211678c0f0624f74cdff36117ab8316697bb8affected
  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < a01e60a1ec6bef9be471fb7182a33c6d6f124e93affected
  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < bd43771ee9759dd9dfae946bff190e2c5a120de5affected
  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < 3bbe2019dd12b8d13671ee6cda055d49637b4c39affected
  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < def5e7070079b2a214b3b1a2fbec623e6fbfe34aaffected
  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < 36a9a0aee881940476b254e0352581401b23f210affected
  • ba7d49b1f0f8e5f24294a880ed576964059af5ef to < c6f6f2444bdbe0079e41914a35081530d0409963affected

Linux Linux

Default version status: affected

  • 3.14affected
  • 0 to < 3.14unaffected
  • 4.9.300 to ≤ 4.9.*unaffected
  • 4.14.265 to ≤ 4.14.*unaffected
  • 4.19.228 to ≤ 4.19.*unaffected
  • 5.4.177 to ≤ 5.4.*unaffected
  • 5.10.97 to ≤ 5.10.*unaffected
  • 5.15.20 to ≤ 5.15.*unaffected
  • 5.16.6 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References