CVE-2022-48697— nvmet: fix a use-after-free
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-48697
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
nvmet: fix a use-after-free
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350 Read of size 4 at addr 0000607bd1835943 by task kworker/13:1/460 Workqueue: nvmet-wq nvme_loop_execute_work [nvme_loop] Call Trace: show_stack+0x52/0x58 dump_stack_lvl+0x49/0x5e print_report.cold+0x36/0x1e2 kasan_report+0xb9/0xf0 __asan_load4+0x6b/0x80 blk_mq_complete_request_remote+0xac/0x350 nvme_loop_queue_response+0x1df/0x275 [nvme_loop] __nvmet_req_complete+0x132/0x4f0 [nvmet] nvmet_req_complete+0x15/0x40 [nvmet] nvmet_execute_io_connect+0x18a/0x1f0 [nvmet] nvme_loop_execute_work+0x20/0x30 [nvme_loop] process_one_work+0x56e/0xa70 worker_thread+0x2d1/0x640 kthread+0x183/0x1c0 ret_from_fork+0x1f/0x30
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于存在释放后重用漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-48697
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-48697
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-05-03 · 25 CVEs total
| CVE-2022-48693 | soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs | |
| CVE-2022-48705 | wifi: mt76: mt7921e: fix crash in chip reset fail | |
| CVE-2022-48704 | drm/radeon: add a force flush to delay work when radeon | |
| CVE-2022-48695 | scsi: mpt3sas: Fix use-after-free warning | |
| CVE-2022-48690 | ice: Fix DMA mappings leak | |
| CVE-2022-48703 | thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR | |
| CVE-2022-48702 | ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() | |
| CVE-2022-48701 | ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() | |
| CVE-2022-48699 | sched/debug: fix dentry leak in update_sched_domain_debugfs | |
| CVE-2022-48698 | drm/amd/display: fix memory leak when using debugfs_lookup() | |
| CVE-2022-48696 | regmap: spi: Reserve space for register address/padding | |
| CVE-2022-48694 | RDMA/irdma: Fix drain SQ hang with no completion | |
| CVE-2022-48670 | peci: cpu: Fix use-after-free in adev_release() | |
| CVE-2022-48692 | RDMA/srp: Set scmnd->result only when scmnd is not NULL | |
| CVE-2022-48691 | netfilter: nf_tables: clean up hook list when offload flags check fails | |
| CVE-2022-48689 | tcp: TX zerocopy should not sense pfmemalloc status | |
| CVE-2022-48688 | i40e: Fix kernel crash during module removal | |
| CVE-2022-48687 | ipv6: sr: fix out-of-bounds read when setting HMAC data. | |
| CVE-2022-48686 | nvme-tcp: fix UAF when detecting digest errors | |
| CVE-2022-48675 | IB/core: Fix a nested dead lock as part of ODP flow |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2022-48697
No comments yet