In the Linux kernel, the following vulnerability has been resolved:

scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe

Running tests with a debug kernel shows that bnx2fc_recv_frame() is
modifying the per_cpu lport stats counters in a non-mpsafe way. Just boot
a debug kernel and run the bnx2fc driver with the hardware enabled.

[ 1391.699147] BUG: using smp_processor_id() in preemptible [00000000] code: bnx2fc_
[ 1391.699160] caller is bnx2fc_recv_frame+0xbf9/0x1760 [bnx2fc]
[ 1391.699174] CPU: 2 PID: 4355 Comm: bnx2fc_l2_threa Kdump: loaded Tainted: G B
[ 1391.699180] Hardware name: HP ProLiant DL120 G7, BIOS J01 07/01/2013
[ 1391.699183] Call Trace:
[ 1391.699188] dump_stack_lvl+0x57/0x7d
[ 1391.699198] check_preemption_disabled+0xc8/0xd0
[ 1391.699205] bnx2fc_recv_frame+0xbf9/0x1760 [bnx2fc]
[ 1391.699215] ? do_raw_spin_trylock+0xb5/0x180
[ 1391.699221] ? bnx2fc_npiv_create_vports.isra.0+0x4e0/0x4e0 [bnx2fc]
[ 1391.699229] ? bnx2fc_l2_rcv_thread+0xb7/0x3a0 [bnx2fc]
[ 1391.699240] bnx2fc_l2_rcv_thread+0x1af/0x3a0 [bnx2fc]
[ 1391.699250] ? bnx2fc_ulp_init+0xc0/0xc0 [bnx2fc]
[ 1391.699258] kthread+0x364/0x420
[ 1391.699263] ? _raw_spin_unlock_irq+0x24/0x50
[ 1391.699268] ? set_kthread_struct+0x100/0x100
[ 1391.699273] ret_from_fork+0x22/0x30

Restore the old get_cpu/put_cpu code with some modifications to reduce the
size of the critical section.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00025.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < 3a345198a7c2d1db2526dc60b77052f75de019d3
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < 471085571f926a1fe6b1bed095638994dbf23990
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < 003bcee66a8f0e76157eb3af369c173151901d97
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < 53e4f71763c61a557283eb43301efd671922d1e8
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < ec4334152dae175dbd8fd5bde1d2139bbe7b42d0
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < 2f5a1ac68bdf2899ce822ab845081922ea8c588e
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < 2d24336c7214b281b51860e54783dfc65f1248df
d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2 affected < 936bd03405fc83ba039d42bc93ffd4b88418f1d3
Linux Linux affected
Version Status Constraints
3.16 affected —
0 unaffected < 3.16
4.9.300 unaffected ≤ 4.9.*
4.14.265 unaffected ≤ 4.14.*
4.19.228 unaffected ≤ 4.19.*
5.4.178 unaffected ≤ 5.4.*
5.10.99 unaffected ≤ 5.10.*
5.15.22 unaffected ≤ 5.15.*
5.16.8 unaffected ≤ 5.16.*
5.17 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/003bcee66a8f0e76157eb3af369c173151901d97 cve-icon cve-icon
https://git.kernel.org/stable/c/2d24336c7214b281b51860e54783dfc65f1248df cve-icon cve-icon
https://git.kernel.org/stable/c/2f5a1ac68bdf2899ce822ab845081922ea8c588e cve-icon cve-icon
https://git.kernel.org/stable/c/3a345198a7c2d1db2526dc60b77052f75de019d3 cve-icon cve-icon
https://git.kernel.org/stable/c/471085571f926a1fe6b1bed095638994dbf23990 cve-icon cve-icon
https://git.kernel.org/stable/c/53e4f71763c61a557283eb43301efd671922d1e8 cve-icon cve-icon
https://git.kernel.org/stable/c/936bd03405fc83ba039d42bc93ffd4b88418f1d3 cve-icon cve-icon
https://git.kernel.org/stable/c/ec4334152dae175dbd8fd5bde1d2139bbe7b42d0 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062055-CVE-2022-48715-dba4@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48715 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48715 cve-icon
History

Wed, 01 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.16:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Tue, 05 Nov 2024 08:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T08:21:36.790Z

Reserved: 2024-06-20T11:09:39.050Z

Link: CVE-2022-48715

cve-icon Vulnrichment

Updated: 2024-08-03T15:17:55.856Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-20T11:15:55.110

Modified: 2025-10-01T13:43:40.033

Link: CVE-2022-48715

cve-icon Redhat

Severity : Low

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2022-48715 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-07-12T16:01:25Z

Weaknesses