CVE-2022-48816

SUNRPC: lock against ->sock changing during sysfs read

State: Published
Severity: 7.8 High
Published: Jul 16, 2024
Updated: Oct 3, 2026
Reserved: Jul 16, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: lock against ->sock changing during sysfs read

->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a ("SUNRPC: Check if the xprt is connected before handling sysfs reads") appears to attempt to fix this problem, but it only narrows the race window.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	21a2be1a5145d072deedc7cdc5b2d17380abea75 to before cd366b9091a3e6ed8229e4b908e895d20b527dc0Affected a8482488a7d6d320f63a9ee1912dbb5ae5b80a61 to before fdc42287ae3f8a35cc2098307f52d7864b4bc8edAffected a8482488a7d6d320f63a9ee1912dbb5ae5b80a61 to before 9482ab4540f5bcc869b44c067ae99b5fca16bd07Affected a8482488a7d6d320f63a9ee1912dbb5ae5b80a61 to before b49ea673e119f59c71645e2f65b3ccad857c90eeAffected 77876473912d1bf1ed16bffa1674e5ff0f499f25Affected 5.10.67 to before 5.10.271Affected 5.13.19 to before 5.14Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.10.271 through 5.10.Not affected 5.15.209 through 5.15.Not affected 5.16.10 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

21a2be1a5145d072deedc7cdc5b2d17380abea75 to before cd366b9091a3e6ed8229e4b908e895d20b527dc0Affected
a8482488a7d6d320f63a9ee1912dbb5ae5b80a61 to before fdc42287ae3f8a35cc2098307f52d7864b4bc8edAffected
a8482488a7d6d320f63a9ee1912dbb5ae5b80a61 to before 9482ab4540f5bcc869b44c067ae99b5fca16bd07Affected
a8482488a7d6d320f63a9ee1912dbb5ae5b80a61 to before b49ea673e119f59c71645e2f65b3ccad857c90eeAffected
77876473912d1bf1ed16bffa1674e5ff0f499f25Affected
5.10.67 to before 5.10.271Affected
5.13.19 to before 5.14Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.10.271 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
5.16.10 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.