Log in Start free

Vulnerability · Published Feb 25, 2024 · Assigned by Linux

CVE-2022-48626moxart: fix potential use-after-free on remove path

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 75.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and using it instead of the pointer dereference.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.16.10-1DEBIAN-CVE-2022-48626
Debian:13linux5.16.10-1DEBIAN-CVE-2022-48626
Debian:14linux5.16.10-1DEBIAN-CVE-2022-48626
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-48626
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-48626
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-48626

Affected products (as reported)

VendorProductVersions
Linux Linux 1b66e94e6b9995323190f31c51d8e1a6f516627e – before f5dc193167591e88797262ec78515a0cbe79ff5f1b66e94e6b9995323190f31c51d8e1a6f516627e – before e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e1b66e94e6b9995323190f31c51d8e1a6f516627e – before 9c25d5ff1856b91bd4365e813f566cb59aaa95521b66e94e6b9995323190f31c51d8e1a6f516627e – before 3a0a7ec5574b510b067cfc734b8bdb6564b31d4e1b66e94e6b9995323190f31c51d8e1a6f516627e – before be93028d306dac9f5b59ebebd9ec7abcfc69c1561b66e94e6b9995323190f31c51d8e1a6f516627e – before af0e6c49438b1596e4be8a267d218a0c88a423231b66e94e6b9995323190f31c51d8e1a6f516627e – before 7f901d53f120d1921f84f7b9b118e87e94b403c51b66e94e6b9995323190f31c51d8e1a6f516627e – before bd2db32e7c3e35bd4d9b8bbff689434a50893546
Linux Linux 3.16

References