What is CVE-2022-48666?

CVE-2022-48666 is a High severity Linux kernel vulnerability with a CVSS score of 7.4 out of 10, classified as a Use After Free flaw (CWE-416), affecting Linux kernel versions from 5.7 onward and patched in 5.10.223, 5.15.164, 5.19.12 and others. CVE-2022-48666 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2022-48666?

CVE-2022-48666 has a CVSS score of 7.4 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2022-48666?

Yes, CVE-2022-48666 has been patched. Fixed versions include 5.10.223, 5.15.164, 5.19.12 and others. If you are running Linux kernel 5.7 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2022-48666 actively exploited?

CVE-2022-48666 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Use After Free (CWE-416)?

The product references memory after it has been freed, which may cause it to crash, use unexpected values, or execute code. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/416.html

CVE-2022-48666

High

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations. Both implementations use resources associated with the SCSI host. Make sure that these resources are still available when .exit_cmd_priv is called by waiting inside scsi_remove_host() until the tag set has been freed. This commit fixes the following use-after-free: ================================================================== BUG: KASAN: use-after-free in srp_exit_cmd_priv+0x27/0xd0 [ib_srp] Read of size 8 at addr ffff888100337000 by task multipathd/16727 Call Trace: <TASK> dump_stack_lvl+0x34/0x44 print_report.cold+0x5e/0x5db kasan_report+0xab/0x120 srp_exit_cmd_priv+0x27/0xd0 [ib_srp] scsi_mq_exit_request+0x4d/0x70 blk_mq_free_rqs+0x143/0x410 __blk_mq_free_map_and_rqs+0x6e/0x100 blk_mq_free_tag_set+0x2b/0x160 scsi_host_dev_release+0xf3/0x1a0 device_release+0x54/0xe0 kobject_put+0xa5/0x120 device_release+0x54/0xe0 kobject_put+0xa5/0x120 scsi_device_dev_release_usercontext+0x4c1/0x4e0 execute_in_process_context+0x23/0x90 device_release+0x54/0xe0 kobject_put+0xa5/0x120 scsi_disk_release+0x3f/0x50 device_release+0x54/0xe0 kobject_put+0xa5/0x120 disk_release+0x17f/0x1b0 device_release+0x54/0xe0 kobject_put+0xa5/0x120 dm_put_table_device+0xa3/0x160 [dm_mod] dm_put_device+0xd0/0x140 [dm_mod] free_priority_group+0xd8/0x110 [dm_multipath] free_multipath+0x94/0xe0 [dm_multipath] dm_table_destroy+0xa2/0x1e0 [dm_mod] __dm_destroy+0x196/0x350 [dm_mod] dev_remove+0x10c/0x160 [dm_mod] ctl_ioctl+0x2c2/0x590 [dm_mod] dm_ctl_ioctl+0x5/0x10 [dm_mod] __x64_sys_ioctl+0xb4/0xf0 dm_ctl_ioctl+0x5/0x10 [dm_mod] __x64_sys_ioctl+0xb4/0xf0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x46/0xb0

Package Linux Kernel

Published 2024-04-28

Last modified 2025-03-20

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.4

out of 10

High

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-416

CVE-2022-48666 is a Use After Free vulnerability

What is Use After Free?

The product references memory after it has been freed, which may cause it to crash, use unexpected values, or execute code. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.7 and later are affected. Fixed in 5.10.223, 5.15.164, 5.19.12, 6.0 and their respective stable series.

Affected from

≥ 5.7

Fixed in

✓ 5.10.223 5.10.x ✓ 5.15.164 5.15.x ✓ 5.19.12 5.19.x ✓ 6.0

References

4 total

Kernel Git
https://git.kernel.org/stable/c/2e7eb4c1e8af8385de22775bd0be552f59b28c9a

Patch
Kernel Git
https://git.kernel.org/stable/c/5ce8fad941233e81f2afb5b52a3fcddd3ba8732f

Patch
Kernel Git
https://git.kernel.org/stable/c/8fe4ce5836e932f5766317cb651c1ff2a4cd0506

Patch
Kernel Git
https://git.kernel.org/stable/c/f818708eeeae793e12dc39f8984ed7732048a7d9

Patch

Details

CVE ID CVE-2022-48666

Severity High

CVSS score 7.4 / 10

CVSS version 3.1

Published 2024-04-28

Modified 2025-03-20

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2022-48666?

CVE-2022-48666 is a High severity Linux kernel vulnerability with a CVSS score of 7.4 out of 10 , classified as an Use After Free flaw (CWE-416) . It affects Linux kernel versions from 5.7 onward and has been patched in 5.10.223, 5.15.164, 5.19.12 and others. CVE-2022-48666 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2022-48666?

CVE-2022-48666 has a CVSS score of 7.4 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2022-48666?

Yes. CVE-2022-48666 has been patched. Fixed versions include 5.10.223, 5.15.164, 5.19.12 and others. If you are running Linux kernel 5.7 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2022-48666 actively exploited?

No. CVE-2022-48666 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.