CVE-2022-48970 af_unix: Get user_ns from in_skb in unix_diag_get_exact().

🗓️ 21 Oct 2024 20:05:51Reported by GoogleType

osv🔗 osv.dev👁 12 Views

In the Linux kernel, a vulnerability has been resolved related to user_ns in unix_diag_get_exact(). Reported by Wei Chen, the issue was a NULL dereference in sk_user_ns()

Reporter	Title	Published	Views	Family All 122
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2023-025)	24 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2023-012 (ALASKERNEL-5.15-2023-012)	24 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2023-041)	24 Jan 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1176)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1192)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2025-1547)	17 May 202500:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2025-1562)	17 May 202500:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2021-4.0-0065	22 Jul 202100:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:3983-1)	14 Nov 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:3985-1)	14 Nov 202400:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/575a6266f63dbb3b8eb1da03671451f0d81b8034
git	www.git.kernel.org/stable/c/5c014eb0ed6c8c57f483e94cc6e90f34ce426d91
git	www.git.kernel.org/stable/c/9c1d6f79a2c7b8221dcec27defc6dc461052ead4
git	www.git.kernel.org/stable/c/b3abe42e94900bdd045c472f9c9be620ba5ce553
git	www.git.kernel.org/stable/c/c66d78aee55dab72c92020ebfbebc464d4f5dd2a
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48970.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-48970
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

02 Apr 2026 08:27Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.5

EPSS0.0001

SSVC