Lucene search

K
redhatcveRedhat.comRH:CVE-2022-48850
HistoryJul 16, 2024 - 8:24 p.m.

CVE-2022-48850

2024-07-1620:24:56
redhat.com
access.redhat.com
3
linux kernel
net-sysfs
vulnerability
patch
sysfs path
netdevice
speed_show
panic
shutdown
null pointer
dereference
kernel
mlx5_core
dma_pool_alloc

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

0

Percentile

5.1%

A flaw was found in the Linux kernel. When bringing down the net device on system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

0

Percentile

5.1%