CVE-2022-48779
published 2024-07-16CVE-2022-48779: In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.22%
12.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if
this is the same as the port's pvid_vlan which we access afterwards,
what we're accessing is freed memory.
Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior
to calling ocelot_vlan_member_del().
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.11-1 (bookworm) | linux 5.16.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d4004422f6f9fa8e55c04482008c1c9f9edd2d19 < c98bed60cdd7f22237ae256cc9c1c3087206b8a2 | c98bed60cdd7f22237ae256cc9c1c3087206b8a2 |
| linux | linux | >= d4004422f6f9fa8e55c04482008c1c9f9edd2d19 < ef57640575406f57f5b3393cf57f457b0ace837e | ef57640575406f57f5b3393cf57f457b0ace837e |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 5.16 < 5.16.11 | 5.16.11 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.16.10 ocelot_vlan_del use after free (c98bed60cdd7/ef5764057540 / WID-SEC-2024-1625)
vuldb·2026-07-11·CVSS 7.8
CVE-2022-48779 [HIGH] Linux Kernel up to 5.16.10 ocelot_vlan_del use after free (c98bed60cdd7/ef5764057540 / WID-SEC-2024-1625)
A vulnerability labeled as problematic has been found in Linux Kernel up to 5.16.10. Affected by this vulnerability is the function ocelot_vlan_del. Such manipulation leads to use after free.
This vulnerability is listed as CVE-2022-48779. The attack must be carried out from within the local network. There is no available exploit.
The affected component should be upgraded.
OSV
CVE-2022-48779: In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del(
osv·2024-07-16·CVSS 7.8
CVE-2022-48779 [HIGH] CVE-2022-48779: In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del(
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if this is the same as the port's pvid_vlan which we access afterwards, what we're accessing is freed memory. Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior to calling ocelot_vlan_member_del().
GHSA
GHSA-45vp-vx4c-9jr2: In the Linux kernel, the following vulnerability has been resolved:
net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
ocelot_vlan_member_de
ghsa_unreviewed·2024-07-16
CVE-2022-48779 [HIGH] CWE-416 GHSA-45vp-vx4c-9jr2: In the Linux kernel, the following vulnerability has been resolved:
net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
ocelot_vlan_member_de
In the Linux kernel, the following vulnerability has been resolved:
net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if
this is the same as the port's pvid_vlan which we access afterwards,
what we're accessing is freed memory.
Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior
to calling ocelot_vlan_member_del().
Red Hat
kernel: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
vendor_redhat·2024-07-16·CVSS 7.8
CVE-2022-48779 [HIGH] CWE-416 kernel: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
kernel: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
In the Linux kernel, the following vulnerability has been resolved:
net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if
this is the same as the port's pvid_vlan which we access afterwards,
what we're accessing is freed memory.
Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior
to calling ocelot_vlan_member_del().
A flaw was found in the Linux kernel in the net ocelot driver, which involved a use-after-free issue in the ocelot_vlan_del() function. The flaw occurred when the ocelot_vlan_member_del() function freed the struct ocelot_bridge_vlan, still referenced by the port's Primary VLAN ID (PVID).
Statement: Red Hat Enterp
Debian
CVE-2022-48779: linux - In the Linux kernel, the following vulnerability has been resolved: net: mscc: ...
vendor_debian·2022·CVSS 7.8
CVE-2022-48779 [HIGH] CVE-2022-48779: linux - In the Linux kernel, the following vulnerability has been resolved: net: mscc: ...
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if this is the same as the port's pvid_vlan which we access afterwards, what we're accessing is freed memory. Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior to calling ocelot_vlan_member_del().
Scope: local
bookworm: resolved (fixed in 5.16.11-1)
bullseye: resolved
forky: resolved (fixed in 5.16.11-1)
sid: resolved (fixed in 5.16.11-1)
trixie: resolved (fixed in 5.16.11-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-16
Published