In the Linux kernel, the following vulnerability has been resolved:

ethernet: aeroflex: fix potential skb leak in greth_init_rings()

The greth_init_rings() function won't free the newly allocated skb when
dma_mapping_error() returns error, so add dev_kfree_skb() to fix it.

Compile tested only.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00014.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d4c41139df6e74c6fff0cbac43e51cab782133be affected < 223654e2e2c8d05347cd8e300f8d1ec6023103dd
d4c41139df6e74c6fff0cbac43e51cab782133be affected < cb1e293f858e5e1152b8791047ed4bdaaf392189
d4c41139df6e74c6fff0cbac43e51cab782133be affected < bfaa8f6c5b84b295dd73b0138b57c5555ca12b1c
d4c41139df6e74c6fff0cbac43e51cab782133be affected < 99669d94ce145389f1d6f197e6e18ed50d43fb76
d4c41139df6e74c6fff0cbac43e51cab782133be affected < 87277bdf2c370ab2d07cfe77dfa9b37f82bbe1e5
d4c41139df6e74c6fff0cbac43e51cab782133be affected < c7adcbd0fd3fde1b19150c3e955fb4a30c5bd9b7
d4c41139df6e74c6fff0cbac43e51cab782133be affected < dd62867a6383f78f75f07039394aac25924a3307
d4c41139df6e74c6fff0cbac43e51cab782133be affected < 063a932b64db3317ec020c94466fe52923a15f60
Linux Linux affected
Version Status Constraints
2.6.34 affected —
0 unaffected < 2.6.34
4.9.336 unaffected ≤ 4.9.*
4.14.302 unaffected ≤ 4.14.*
4.19.269 unaffected ≤ 4.19.*
5.4.227 unaffected ≤ 5.4.*
5.10.159 unaffected ≤ 5.10.*
5.15.83 unaffected ≤ 5.15.*
6.0.13 unaffected ≤ 6.0.*
6.1 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/063a932b64db3317ec020c94466fe52923a15f60 cve-icon cve-icon
https://git.kernel.org/stable/c/223654e2e2c8d05347cd8e300f8d1ec6023103dd cve-icon cve-icon
https://git.kernel.org/stable/c/87277bdf2c370ab2d07cfe77dfa9b37f82bbe1e5 cve-icon cve-icon
https://git.kernel.org/stable/c/99669d94ce145389f1d6f197e6e18ed50d43fb76 cve-icon cve-icon
https://git.kernel.org/stable/c/bfaa8f6c5b84b295dd73b0138b57c5555ca12b1c cve-icon cve-icon
https://git.kernel.org/stable/c/c7adcbd0fd3fde1b19150c3e955fb4a30c5bd9b7 cve-icon cve-icon
https://git.kernel.org/stable/c/cb1e293f858e5e1152b8791047ed4bdaaf392189 cve-icon cve-icon
https://git.kernel.org/stable/c/dd62867a6383f78f75f07039394aac25924a3307 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024102142-CVE-2022-48958-bb88@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48958 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48958 cve-icon
History

Mon, 28 Oct 2024 06:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772

Thu, 24 Oct 2024 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Tue, 22 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Oct 2024 13:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 21 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ethernet: aeroflex: fix potential skb leak in greth_init_rings() The greth_init_rings() function won't free the newly allocated skb when dma_mapping_error() returns error, so add dev_kfree_skb() to fix it. Compile tested only.
Title ethernet: aeroflex: fix potential skb leak in greth_init_rings()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T08:26:56.189Z

Reserved: 2024-08-22T01:27:53.627Z

Link: CVE-2022-48958

cve-icon Vulnrichment

Updated: 2024-10-22T13:20:48.700Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-21T20:15:07.270

Modified: 2024-10-24T20:00:34.033

Link: CVE-2022-48958

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-10-21T00:00:00Z

Links: CVE-2022-48958 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses