CVE-2022-48640 bonding: fix NULL deref in bond_rr_gen_slave_id

🗓️ 28 Apr 2024 12:59:48Reported by LinuxType

CVE-2022-48640 bonding: fix NULL deref in bond_rr_gen_slave_id. Fix a NULL dereference of the struct bonding.rr_tx_counter member because if a bond is initially created with an initial mode != zero (Round Robin) the memory required for the counter is never created and when the mode is changed there is never any attempt to verify the memory is allocated upon switching modes

Reporter	Title	Published	Views	Family All 70
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2022-009 (ALASKERNEL-5.15-2022-009)	25 Oct 202200:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2024:1644-1)	15 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2024:1659-1)	16 May 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-48640	5 Mar 202500:00	–	nessus
Amazon	Important: kernel	24 Oct 202200:00	–	amazon
AstraLinux	Astra Linux – Vulnerability in Linux 5.15	24 Aug 202610:19	–	astralinux
BDU FSTEC	The vulnerability of the bonding component of the Linux operating system’s kernel allows a hacker to trigger a service failure.	21 Nov 202400:00	–	bdu_fstec
CNNVD	Linux kernel 安全漏洞	28 Apr 202400:00	–	cnnvd

Source	Link
git	www.git.kernel.org/stable/c/2c8e8ab53acfc78da0b4a65f30cb5d306e7d78f7
git	www.git.kernel.org/stable/c/0e400d602f46360752e4b32ce842dba3808e15e6
git	www.git.kernel.org/stable/c/ec3a6f4ffe556a28f6f5028bf7c4412557e7051b

11 May 2026 18:44Current

6.6Medium risk

Vulners AI Score6.6

EPSS0.00232

SSVC