Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-48816
HistoryJul 16, 2024 - 12:15 p.m.

CVE-2022-48816

2024-07-1612:15:05
Debian Security Bug Tracker
security-tracker.debian.org
5
linux kernel
vulnerability
cve-2022-48816
sunrpc
lock
sysfs read
mutex
oops.

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.3%

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a (“SUNRPC: Check if the xprt is connected before handling sysfs reads”) appears to attempt to fix this problem, but it only narrows the race window.

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.3%