Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-48964

ravb: Fix potential use-after-free in ravb_rx_gbeth()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ravb: Fix potential use-after-free in ravb_rx_gbeth() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1c59eb678cbd8d322d06d3a5514d36e8e1a4e84c to < e63c681494dcc0527c625a0a4f59bf10259f5ee0affected
  • 1c59eb678cbd8d322d06d3a5514d36e8e1a4e84c to < 5a5a3e564de6a8db987410c5c2f4748d50ea82b8affected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 6.0.13 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References