CVE-2022-48851

staging: gdm724x: fix use after free in gdm_lte_rx()

State: Published
Severity: 9.8 Critical
Published: Jul 16, 2024
Updated: Aug 5, 2026
Reserved: Jul 16, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: gdm724x: fix use after free in gdm_lte_rx()

The netif_rx_ni() function frees the skb so we can't dereference it to save the skb->len.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	61e121047645122c47714fcda684d0ee67f444af to before 6dc7b87c62423bfa68139fe95e85028aab584c9aAffected 61e121047645122c47714fcda684d0ee67f444af to before 83a9c886c2b5a0d28c0b37e1736b47f38d61332aAffected 61e121047645122c47714fcda684d0ee67f444af to before 48ecdf3e29a6e514e8196691589c7dfc6c4ac169Affected 61e121047645122c47714fcda684d0ee67f444af to before 403e3afe241b62401de1f8629c9c6b9b3d69dbffAffected 61e121047645122c47714fcda684d0ee67f444af to before 6d9700b445098dbbce0caff4b8cfca214cf1e757Affected 61e121047645122c47714fcda684d0ee67f444af to before 1fb9dd3787495b4deb0efe66c58306b65691a48fAffected 61e121047645122c47714fcda684d0ee67f444af to before d39dc79513e99147b4c158a8a9e46743e23944f5Affected 61e121047645122c47714fcda684d0ee67f444af to before fc7f750dc9d102c1ed7bbe4591f991e770c99033Affected
LinuxLinux	3.12Affected before 3.12Not affected 4.9.307 through 4.9.Not affected 4.14.272 through 4.14.Not affected 4.19.235 through 4.19.Not affected 5.4.185 through 5.4.Not affected 5.10.106 through 5.10.Not affected 5.15.29 through 5.15.Not affected 5.16.15 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

61e121047645122c47714fcda684d0ee67f444af to before 6dc7b87c62423bfa68139fe95e85028aab584c9aAffected
61e121047645122c47714fcda684d0ee67f444af to before 83a9c886c2b5a0d28c0b37e1736b47f38d61332aAffected
61e121047645122c47714fcda684d0ee67f444af to before 48ecdf3e29a6e514e8196691589c7dfc6c4ac169Affected
61e121047645122c47714fcda684d0ee67f444af to before 403e3afe241b62401de1f8629c9c6b9b3d69dbffAffected
61e121047645122c47714fcda684d0ee67f444af to before 6d9700b445098dbbce0caff4b8cfca214cf1e757Affected
61e121047645122c47714fcda684d0ee67f444af to before 1fb9dd3787495b4deb0efe66c58306b65691a48fAffected
61e121047645122c47714fcda684d0ee67f444af to before d39dc79513e99147b4c158a8a9e46743e23944f5Affected
61e121047645122c47714fcda684d0ee67f444af to before fc7f750dc9d102c1ed7bbe4591f991e770c99033Affected

LinuxLinux

3.12Affected
before 3.12Not affected
4.9.307 through 4.9.*Not affected
4.14.272 through 4.14.*Not affected
4.19.235 through 4.19.*Not affected
5.4.185 through 5.4.*Not affected
5.10.106 through 5.10.*Not affected
5.15.29 through 5.15.*Not affected
5.16.15 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.