CVE-2022-48754

phylib: fix potential use-after-free

State: Published
Severity: 7.8 High
Published: Jun 20, 2024
Updated: Aug 5, 2026
Reserved: Jun 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

phylib: fix potential use-after-free

Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach().

The comment before the put_device() call says that the phydev might go away with put_device().

Fix potential use-after-free by calling phy_device_reset() before put_device().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	bafbdd527d569c8200521f2f7579f65a044271be to before 67d271760b037ce0806d687ee6057edc8afd4205Affected bafbdd527d569c8200521f2f7579f65a044271be to before f39027cbada43b33566c312e6be3db654ca3ad17Affected bafbdd527d569c8200521f2f7579f65a044271be to before bd024e36f68174b1793906c39ca16cee0c9295c2Affected bafbdd527d569c8200521f2f7579f65a044271be to before aefaccd19379d6c4620269a162bfb88ff687f289Affected bafbdd527d569c8200521f2f7579f65a044271be to before cb2fab10fc5e7a3aa1bb0a68a3abdcf3e37852afAffected bafbdd527d569c8200521f2f7579f65a044271be to before cbda1b16687580d5beee38273f6241ae3725960cAffected
LinuxLinux	4.16Affected before 4.16Not affected 4.19.228 through 4.19.Not affected 5.4.176 through 5.4.Not affected 5.10.96 through 5.10.Not affected 5.15.19 through 5.15.Not affected 5.16.5 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

bafbdd527d569c8200521f2f7579f65a044271be to before 67d271760b037ce0806d687ee6057edc8afd4205Affected
bafbdd527d569c8200521f2f7579f65a044271be to before f39027cbada43b33566c312e6be3db654ca3ad17Affected
bafbdd527d569c8200521f2f7579f65a044271be to before bd024e36f68174b1793906c39ca16cee0c9295c2Affected
bafbdd527d569c8200521f2f7579f65a044271be to before aefaccd19379d6c4620269a162bfb88ff687f289Affected
bafbdd527d569c8200521f2f7579f65a044271be to before cb2fab10fc5e7a3aa1bb0a68a3abdcf3e37852afAffected
bafbdd527d569c8200521f2f7579f65a044271be to before cbda1b16687580d5beee38273f6241ae3725960cAffected

LinuxLinux

4.16Affected
before 4.16Not affected
4.19.228 through 4.19.*Not affected
5.4.176 through 5.4.*Not affected
5.10.96 through 5.10.*Not affected
5.15.19 through 5.15.*Not affected
5.16.5 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.