NVD Vulnerability Detail

CVE-2022-48911

Summary	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0. On failure, we cannot queue the packet and need to indicate an error. The packet will be dropped by the caller. v2: split skb prefetch hunk into separate change
Publication Date	Aug. 22, 2024, 11:15 a.m.
Registration Date	Aug. 26, 2024, 4:57 p.m.
Last Update	Sept. 12, 2024, 10:24 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/21b27b2baa27423286e9b8d3f0b194d587083d95	Patch
2	https://git.kernel.org/stable/c/ef97921ccdc243170fcef857ba2a17cf697aece5	Patch
3	https://git.kernel.org/stable/c/34dc4a6a7f261736ef7183868a5bddad31c7f9e3	Patch
4	https://git.kernel.org/stable/c/43c25da41e3091b31a906651a43e80a2719aa1ff	Patch
5	https://git.kernel.org/stable/c/4d05239203fa38ea8a6f31e228460da4cb17a71a	Patch
6	https://git.kernel.org/stable/c/dd648bd1b33a828f62befa696b206c688da0ec43	Patch
7	https://git.kernel.org/stable/c/dcc3cb920bf7ba66ac5e9272293a9ba5f80917ee	Patch
8	https://git.kernel.org/stable/c/c3873070247d9e3c7a6b0cf9bf9b45e8018427b1	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-416	解放済みメモリの使用	https://cwe.mitre.org/data/definitions/416.html

JVN Vulnerability Information

Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性

Title	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性
Summary	Linux の Linux Kernel には、解放済みメモリの使用に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 1, 2022, midnight
Registration Date	Sept. 13, 2024, 4:33 p.m.
Last Update	Sept. 13, 2024, 4:33 p.m.

Affected System

Linux

Linux Kernel 2.6.29 以上 4.9.305 未満

Linux Kernel 4.10 以上 4.14.270 未満

Linux Kernel 4.15 以上 4.19.233 未満

Linux Kernel 4.20 以上 5.4.183 未満

Linux Kernel 5.11 以上 5.15.27 未満

Linux Kernel 5.16 以上 5.16.13 未満

Linux Kernel 5.17

Linux Kernel 5.5 以上 5.10.104 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-48911	https://www.cve.org/CVERecord?id=CVE-2022-48911
National Vulnerability Database (NVD)
2	CVE-2022-48911	https://nvd.nist.gov/vuln/detail/CVE-2022-48911

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-416	https://cwe.mitre.org/data/definitions/416.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	netfilter: nf_queue: fix possible use-after-free (21b27b2)	https://git.kernel.org/stable/c/21b27b2baa27423286e9b8d3f0b194d587083d95
2	netfilter: nf_queue: fix possible use-after-free (34dc4a6)	https://git.kernel.org/stable/c/34dc4a6a7f261736ef7183868a5bddad31c7f9e3
3	netfilter: nf_queue: fix possible use-after-free (43c25da)	https://git.kernel.org/stable/c/43c25da41e3091b31a906651a43e80a2719aa1ff
4	netfilter: nf_queue: fix possible use-after-free (4d05239)	https://git.kernel.org/stable/c/4d05239203fa38ea8a6f31e228460da4cb17a71a
5	netfilter: nf_queue: fix possible use-after-free (c387307)	https://git.kernel.org/stable/c/c3873070247d9e3c7a6b0cf9bf9b45e8018427b1
6	netfilter: nf_queue: fix possible use-after-free (dcc3cb9)	https://git.kernel.org/stable/c/dcc3cb920bf7ba66ac5e9272293a9ba5f80917ee
7	netfilter: nf_queue: fix possible use-after-free (dd648bd)	https://git.kernel.org/stable/c/dd648bd1b33a828f62befa696b206c688da0ec43
8	netfilter: nf_queue: fix possible use-after-free (ef97921)	https://git.kernel.org/stable/c/ef97921ccdc243170fcef857ba2a17cf697aece5
Linux Kernel
9	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年09月13日] 掲載	Sept. 13, 2024, 11:49 a.m.