Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-48960

net: hisilicon: Fix potential use-after-free in hix5hd2_rx()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < 179499e7a240b2ef590f05eb379c810c26bbc8a4affected
  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < 8067cd244cea2c332f8326842fd10158fa2cb64faffected
  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < 3a4eddd1cb023a71df4152fcc76092953e6fe95aaffected
  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < 1b6360a093ab8969c91a30bb58b753282e2ced4caffected
  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < 93aaa4bb72e388f6a4887541fd3d18b84f1b5ddcaffected
  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < b8ce0e6f9f88a6bb49d291498377e61ea27a5387affected
  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < b6307f7a2fc1c5407b6176f2af34a95214a8c262affected
  • 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to < 433c07a13f59856e4585e89e86b7d4cc59348fabaffected

Linux Linux

Default version status: affected

  • 3.16affected
  • 0 to < 3.16unaffected
  • 4.9.336 to ≤ 4.9.*unaffected
  • 4.14.302 to ≤ 4.14.*unaffected
  • 4.19.269 to ≤ 4.19.*unaffected
  • 5.4.227 to ≤ 5.4.*unaffected
  • 5.10.159 to ≤ 5.10.*unaffected
  • 5.15.83 to ≤ 5.15.*unaffected
  • 6.0.13 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References