CVE-2022-48742

rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()

State: Published
Severity: 7.8 High
Published: Jun 20, 2024
Updated: Aug 5, 2026
Reserved: Jun 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()

While looking at one unrelated syzbot bug, I found the replay logic in __rtnl_newlink() to potentially trigger use-after-free.

It is better to clear master_dev and m_ops inside the loop, in case we have to replay it.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 2cf180360d66bd657e606c1217e0e668e6faa303Affected ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 7d9211678c0f0624f74cdff36117ab8316697bb8Affected ba7d49b1f0f8e5f24294a880ed576964059af5ef to before a01e60a1ec6bef9be471fb7182a33c6d6f124e93Affected ba7d49b1f0f8e5f24294a880ed576964059af5ef to before bd43771ee9759dd9dfae946bff190e2c5a120de5Affected ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 3bbe2019dd12b8d13671ee6cda055d49637b4c39Affected ba7d49b1f0f8e5f24294a880ed576964059af5ef to before def5e7070079b2a214b3b1a2fbec623e6fbfe34aAffected ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 36a9a0aee881940476b254e0352581401b23f210Affected ba7d49b1f0f8e5f24294a880ed576964059af5ef to before c6f6f2444bdbe0079e41914a35081530d0409963Affected
LinuxLinux	3.14Affected before 3.14Not affected 4.9.300 through 4.9.Not affected 4.14.265 through 4.14.Not affected 4.19.228 through 4.19.Not affected 5.4.177 through 5.4.Not affected 5.10.97 through 5.10.Not affected 5.15.20 through 5.15.Not affected 5.16.6 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 2cf180360d66bd657e606c1217e0e668e6faa303Affected
ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 7d9211678c0f0624f74cdff36117ab8316697bb8Affected
ba7d49b1f0f8e5f24294a880ed576964059af5ef to before a01e60a1ec6bef9be471fb7182a33c6d6f124e93Affected
ba7d49b1f0f8e5f24294a880ed576964059af5ef to before bd43771ee9759dd9dfae946bff190e2c5a120de5Affected
ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 3bbe2019dd12b8d13671ee6cda055d49637b4c39Affected
ba7d49b1f0f8e5f24294a880ed576964059af5ef to before def5e7070079b2a214b3b1a2fbec623e6fbfe34aAffected
ba7d49b1f0f8e5f24294a880ed576964059af5ef to before 36a9a0aee881940476b254e0352581401b23f210Affected
ba7d49b1f0f8e5f24294a880ed576964059af5ef to before c6f6f2444bdbe0079e41914a35081530d0409963Affected

LinuxLinux

3.14Affected
before 3.14Not affected
4.9.300 through 4.9.*Not affected
4.14.265 through 4.14.*Not affected
4.19.228 through 4.19.*Not affected
5.4.177 through 5.4.*Not affected
5.10.97 through 5.10.*Not affected
5.15.20 through 5.15.*Not affected
5.16.6 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.