CVE-2022-48780
published 2024-07-16CVE-2022-48780: In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback functions…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
13.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
net/smc: Avoid overwriting the copies of clcsock callback functions
The callback functions of clcsock will be saved and replaced during
the fallback. But if the fallback happens more than once, then the
copies of these callback functions will be overwritten incorrectly,
resulting in a loop call issue:
clcsk->sk_error_report
|- smc_fback_error_report() clcsk_error_report() ------------------|
So this patch fixes the issue by saving these function pointers only
once in the fallback and avoiding overwriting.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.11-1 (bookworm) | linux 5.16.11-1 (bookworm) |
| linux | linux | >= 0ef6049f664941bc0f75828b3a61877635048b27 < 7de7ba7a8bd4fde0141de8674c13514d0072f0e6 | 7de7ba7a8bd4fde0141de8674c13514d0072f0e6 |
| linux | linux | >= 341adeec9adad0874f29a0a1af35638207352a39 < 1de9770d121ee9294794cca0e0be8fbfa0134ee8 | 1de9770d121ee9294794cca0e0be8fbfa0134ee8 |
| linux | linux | >= 5.15.22 < 5.15.25 | 5.15.25 |
| linux | linux | >= 5.16.8 < 5.16.11 | 5.16.11 |
| linux | linux | >= 504078fbe9dd570d685361b57784a6050bc40aaa < f00b6c976ae0dfbd9b891175f713f59095d23842 | f00b6c976ae0dfbd9b891175f713f59095d23842 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 5.15.22 < 5.15.25 | 5.15.25 |
| linux | linux_kernel | >= 5.16.8 < 5.16.11 | 5.16.11 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net/smc: Avoid overwriting the copies of clcsock callback functions
vendor_redhat·2024-07-16·CVSS 5.5
CVE-2022-48780 [MEDIUM] CWE-835 kernel: net/smc: Avoid overwriting the copies of clcsock callback functions
kernel: net/smc: Avoid overwriting the copies of clcsock callback functions
In the Linux kernel, the following vulnerability has been resolved:
net/smc: Avoid overwriting the copies of clcsock callback functions
The callback functions of clcsock will be saved and replaced during
the fallback. But if the fallback happens more than once, then the
copies of these callback functions will be overwritten incorrectly,
resulting in a loop call issue:
clcsk->sk_error_report
|- smc_fback_error_report() clcsk_error_report() ------------------|
So this patch fixes the issue by saving these function pointers only
once in the fallback and avoiding overwriting.
Statement: Following issue marked as moderate with "not affected or will not fix" for Red Hat Enterprise Linux, as it is not vulnerable to this
Debian
CVE-2022-48780: linux - In the Linux kernel, the following vulnerability has been resolved: net/smc: Av...
vendor_debian·2022·CVSS 5.5
CVE-2022-48780 [MEDIUM] CVE-2022-48780: linux - In the Linux kernel, the following vulnerability has been resolved: net/smc: Av...
In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback functions of clcsock will be saved and replaced during the fallback. But if the fallback happens more than once, then the copies of these callback functions will be overwritten incorrectly, resulting in a loop call issue: clcsk->sk_error_report |- smc_fback_error_report() clcsk_error_report() ------------------| So this patch fixes the issue by saving these function pointers only once in the fallback and avoiding overwriting.
Scope: local
bookworm: resolved (fixed in 5.16.11-1)
bullseye: resolved
forky: resolved (fixed in 5.16.11-1)
sid: resolved (fixed in 5.16.11-1)
trixie: resolved (fixed in 5.16.11-1)
VulDB
Linux Kernel up to 5.15.24/5.16.10 net smc_fback_error_report infinite loop (7de7ba7a8bd4/f00b6c976ae0/1de9770d121e / WID-SEC-2024-1625)
vuldb·2026-07-11·CVSS 5.5
CVE-2022-48780 [MEDIUM] Linux Kernel up to 5.15.24/5.16.10 net smc_fback_error_report infinite loop (7de7ba7a8bd4/f00b6c976ae0/1de9770d121e / WID-SEC-2024-1625)
A vulnerability marked as critical has been reported in Linux Kernel up to 5.15.24/5.16.10. Affected by this issue is the function smc_fback_error_report of the component net. Performing a manipulation results in infinite loop.
This vulnerability is cataloged as CVE-2022-48780. The attack must originate from the local network. There is no exploit available.
It is suggested to upgrade the affected component.
GHSA
GHSA-xrhw-whc6-6mj7: In the Linux kernel, the following vulnerability has been resolved:
net/smc: Avoid overwriting the copies of clcsock callback functions
The callback
ghsa_unreviewed·2024-07-16
CVE-2022-48780 [MEDIUM] CWE-835 GHSA-xrhw-whc6-6mj7: In the Linux kernel, the following vulnerability has been resolved:
net/smc: Avoid overwriting the copies of clcsock callback functions
The callback
In the Linux kernel, the following vulnerability has been resolved:
net/smc: Avoid overwriting the copies of clcsock callback functions
The callback functions of clcsock will be saved and replaced during
the fallback. But if the fallback happens more than once, then the
copies of these callback functions will be overwritten incorrectly,
resulting in a loop call issue:
clcsk->sk_error_report
|- smc_fback_error_report() clcsk_error_report() ------------------|
So this patch fixes the issue by saving these function pointers only
once in the fallback and avoiding overwriting.
OSV
CVE-2022-48780: In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback f
osv·2024-07-16·CVSS 5.5
CVE-2022-48780 [MEDIUM] CVE-2022-48780: In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback f
In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback functions of clcsock will be saved and replaced during the fallback. But if the fallback happens more than once, then the copies of these callback functions will be overwritten incorrectly, resulting in a loop call issue: clcsk->sk_error_report |- smc_fback_error_report() clcsk_error_report() ------------------| So this patch fixes the issue by saving these function pointers only once in the fallback and avoiding overwriting.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/1de9770d121ee9294794cca0e0be8fbfa0134ee8https://git.kernel.org/stable/c/7de7ba7a8bd4fde0141de8674c13514d0072f0e6https://git.kernel.org/stable/c/f00b6c976ae0dfbd9b891175f713f59095d23842https://git.kernel.org/stable/c/1de9770d121ee9294794cca0e0be8fbfa0134ee8https://git.kernel.org/stable/c/7de7ba7a8bd4fde0141de8674c13514d0072f0e6https://git.kernel.org/stable/c/f00b6c976ae0dfbd9b891175f713f59095d23842
2024-07-16
Published