Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-48962

net: hisilicon: Fix potential use-after-free in hisi_femac_rx()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < 3501da8eb6d0f5f114a09ec953c54423f6f35885affected
  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < 196e12671cb629d9f3b77b4d8bec854fc445533aaffected
  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < aceec8ab752428d8e151321479e82cc1a40fee2eaffected
  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < e71a46cc8c9ad75f3bb0e4b361e81f79c0214ccaaffected
  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < 296a50aa8b2982117520713edc1375777a9f8506affected
  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < 6f4798ac9c9e98f41553c4f5e6c832c8860a6942affected
  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < 8595a2db8eb0ffcbb466eb9f4a7507a5ba06ebb9affected
  • 542ae60af24f02e130e62cb3b7c23163a2350056 to < 4640177049549de1a43e9bc49265f0cdfce08cfdaffected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 4.9.336 to ≤ 4.9.*unaffected
  • 4.14.302 to ≤ 4.14.*unaffected
  • 4.19.269 to ≤ 4.19.*unaffected
  • 5.4.227 to ≤ 5.4.*unaffected
  • 5.10.159 to ≤ 5.10.*unaffected
  • 5.15.83 to ≤ 5.15.*unaffected
  • 6.0.13 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References