CVE-2022-48962

net: hisilicon: Fix potential use-after-free in hisi_femac_rx()

State: Published
Severity: 8.8 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hisilicon: Fix potential use-after-free in hisi_femac_rx()

The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	542ae60af24f02e130e62cb3b7c23163a2350056 to before 3501da8eb6d0f5f114a09ec953c54423f6f35885Affected 542ae60af24f02e130e62cb3b7c23163a2350056 to before 196e12671cb629d9f3b77b4d8bec854fc445533aAffected 542ae60af24f02e130e62cb3b7c23163a2350056 to before aceec8ab752428d8e151321479e82cc1a40fee2eAffected 542ae60af24f02e130e62cb3b7c23163a2350056 to before e71a46cc8c9ad75f3bb0e4b361e81f79c0214ccaAffected 542ae60af24f02e130e62cb3b7c23163a2350056 to before 296a50aa8b2982117520713edc1375777a9f8506Affected 542ae60af24f02e130e62cb3b7c23163a2350056 to before 6f4798ac9c9e98f41553c4f5e6c832c8860a6942Affected 542ae60af24f02e130e62cb3b7c23163a2350056 to before 8595a2db8eb0ffcbb466eb9f4a7507a5ba06ebb9Affected 542ae60af24f02e130e62cb3b7c23163a2350056 to before 4640177049549de1a43e9bc49265f0cdfce08cfdAffected
LinuxLinux	4.8Affected before 4.8Not affected 4.9.336 through 4.9.Not affected 4.14.302 through 4.14.Not affected 4.19.269 through 4.19.Not affected 5.4.227 through 5.4.Not affected 5.10.159 through 5.10.Not affected 5.15.83 through 5.15.Not affected 6.0.13 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

542ae60af24f02e130e62cb3b7c23163a2350056 to before 3501da8eb6d0f5f114a09ec953c54423f6f35885Affected
542ae60af24f02e130e62cb3b7c23163a2350056 to before 196e12671cb629d9f3b77b4d8bec854fc445533aAffected
542ae60af24f02e130e62cb3b7c23163a2350056 to before aceec8ab752428d8e151321479e82cc1a40fee2eAffected
542ae60af24f02e130e62cb3b7c23163a2350056 to before e71a46cc8c9ad75f3bb0e4b361e81f79c0214ccaAffected
542ae60af24f02e130e62cb3b7c23163a2350056 to before 296a50aa8b2982117520713edc1375777a9f8506Affected
542ae60af24f02e130e62cb3b7c23163a2350056 to before 6f4798ac9c9e98f41553c4f5e6c832c8860a6942Affected
542ae60af24f02e130e62cb3b7c23163a2350056 to before 8595a2db8eb0ffcbb466eb9f4a7507a5ba06ebb9Affected
542ae60af24f02e130e62cb3b7c23163a2350056 to before 4640177049549de1a43e9bc49265f0cdfce08cfdAffected

LinuxLinux

4.8Affected
before 4.8Not affected
4.9.336 through 4.9.*Not affected
4.14.302 through 4.14.*Not affected
4.19.269 through 4.19.*Not affected
5.4.227 through 5.4.*Not affected
5.10.159 through 5.10.*Not affected
5.15.83 through 5.15.*Not affected
6.0.13 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.