CVE-2022-48960

net: hisilicon: Fix potential use-after-free in hix5hd2_rx()

State: Published
Severity: 8.8 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hisilicon: Fix potential use-after-free in hix5hd2_rx()

The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 179499e7a240b2ef590f05eb379c810c26bbc8a4Affected 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 8067cd244cea2c332f8326842fd10158fa2cb64fAffected 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 3a4eddd1cb023a71df4152fcc76092953e6fe95aAffected 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 1b6360a093ab8969c91a30bb58b753282e2ced4cAffected 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 93aaa4bb72e388f6a4887541fd3d18b84f1b5ddcAffected 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before b8ce0e6f9f88a6bb49d291498377e61ea27a5387Affected 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before b6307f7a2fc1c5407b6176f2af34a95214a8c262Affected 57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 433c07a13f59856e4585e89e86b7d4cc59348fabAffected
LinuxLinux	3.16Affected before 3.16Not affected 4.9.336 through 4.9.Not affected 4.14.302 through 4.14.Not affected 4.19.269 through 4.19.Not affected 5.4.227 through 5.4.Not affected 5.10.159 through 5.10.Not affected 5.15.83 through 5.15.Not affected 6.0.13 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 179499e7a240b2ef590f05eb379c810c26bbc8a4Affected
57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 8067cd244cea2c332f8326842fd10158fa2cb64fAffected
57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 3a4eddd1cb023a71df4152fcc76092953e6fe95aAffected
57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 1b6360a093ab8969c91a30bb58b753282e2ced4cAffected
57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 93aaa4bb72e388f6a4887541fd3d18b84f1b5ddcAffected
57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before b8ce0e6f9f88a6bb49d291498377e61ea27a5387Affected
57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before b6307f7a2fc1c5407b6176f2af34a95214a8c262Affected
57c5bc9ad7d799e9507ba6e993398d2c55f03fab to before 433c07a13f59856e4585e89e86b7d4cc59348fabAffected

LinuxLinux

3.16Affected
before 3.16Not affected
4.9.336 through 4.9.*Not affected
4.14.302 through 4.14.*Not affected
4.19.269 through 4.19.*Not affected
5.4.227 through 5.4.*Not affected
5.10.159 through 5.10.*Not affected
5.15.83 through 5.15.*Not affected
6.0.13 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.