Use-after-free in Linux kernel - CVE-2022-48666

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU90191

Use-after-free in Linux kernel - CVE-2022-48666

Published: May 31, 2024 / Updated: May 14, 2025


Vulnerability identifier: #VU90191
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-48666
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the __scsi_remove_device() function in drivers/scsi/scsi_sysfs.c, within the scsi_alloc_sdev() function in drivers/scsi/scsi_scan.c, within the scsi_mq_setup_tags() function in drivers/scsi/scsi_lib.c, within the scsi_remove_host(), scsi_add_host_with_dma() and scsi_host_dev_release() functions in drivers/scsi/hosts.c. A local user can escalate privileges on the system.


Affected software

Linux kernel
Debian Linux
Ubuntu
SmartFabric Storage Software
OpenManage Network Integration (OMNI)
linux (Debian package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-5.15.0-125-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-125-generic (Ubuntu package)
linux-image-5.15.0-125-lowlatency (Ubuntu package)
linux-image-5.15.0-125-generic-64k (Ubuntu package)
linux-image-5.15.0-125-generic-lpae (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.15.0-1038-xilinx-zynqmp (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1055-gkeop (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.15.0-1065-raspi (Ubuntu package)
linux-image-5.15.0-1065-ibm (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1067-nvidia (Ubuntu package)
linux-image-5.15.0-1067-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1067-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1069-kvm (Ubuntu package)
linux-image-5.15.0-1069-gke (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1070-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1071-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1072-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1075-azure (Ubuntu package)
linux-image-5.15.0-1078-azure (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

How to mitigate CVE-2022-48666

Install update from vendor's website.

Linux kernel - addressed in versions 5.10.223, 5.15.164, 5.19.12, 6.0
SmartFabric Storage Software - update to 1.4.3
OpenManage Network Integration (OMNI) - update to 3.7
linux (Debian package) - update to 5.10.223-1
linux-image-lowlatency (Ubuntu package) - update to 5.15.0.125.113
linux-image-lowlatency-64k (Ubuntu package) - update to 5.15.0.125.113
linux-image-virtual (Ubuntu package) - update to 5.15.0.125.124
linux-image-generic-lpae (Ubuntu package) - update to 5.15.0.125.124
linux-image-generic-64k (Ubuntu package) - update to 5.15.0.125.124
linux-image-generic (Ubuntu package) - update to 5.15.0.125.124
linux-image-5.15.0-125-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-125.135, 5.15.0-125.135~20.04.1
linux-image-5.15.0-125-generic (Ubuntu package) - addressed in versions 5.15.0-125.135, 5.15.0-125.135~20.04.1
linux-image-5.15.0-125-lowlatency (Ubuntu package) - addressed in versions 5.15.0-125.135, 5.15.0-125.135~20.04.1
linux-image-5.15.0-125-generic-64k (Ubuntu package) - addressed in versions 5.15.0-125.135, 5.15.0-125.135~20.04.1
linux-image-5.15.0-125-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-125.135, 5.15.0-125.135~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.125.135~20.04.1
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.15.0.1038.42
linux-image-5.15.0-1038-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1038.42
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1055.54
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1055.54, 5.15.0.1055.62~20.04.1
linux-image-5.15.0-1055-gkeop (Ubuntu package) - addressed in versions 5.15.0-1055.62, 5.15.0-1055.62~20.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1065.61, 5.15.0.1065.68~20.04.1
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1065.63
linux-image-raspi (Ubuntu package) - update to 5.15.0.1065.63
linux-image-5.15.0-1065-raspi (Ubuntu package) - update to 5.15.0-1065.68
linux-image-5.15.0-1065-ibm (Ubuntu package) - addressed in versions 5.15.0-1065.68, 5.15.0-1065.68~20.04.1
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1067.67
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1067.67
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1067.67, 5.15.0.1067.73~20.04.1
linux-image-5.15.0-1067-nvidia (Ubuntu package) - update to 5.15.0-1067.68
linux-image-5.15.0-1067-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1067.68
linux-image-5.15.0-1067-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1067.73, 5.15.0-1067.73~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1067.73~20.04.1
linux-image-kvm (Ubuntu package) - update to 5.15.0.1069.65
linux-image-gke (Ubuntu package) - update to 5.15.0.1069.68
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1069.68
linux-image-5.15.0-1069-kvm (Ubuntu package) - update to 5.15.0-1069.74
linux-image-5.15.0-1069-gke (Ubuntu package) - update to 5.15.0-1069.75
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1070.66
linux-image-5.15.0-1070-oracle (Ubuntu package) - addressed in versions 5.15.0-1070.76, 5.15.0-1070.76~20.04.1
linux-image-oracle (Ubuntu package) - update to 5.15.0.1070.76~20.04.1
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1071.67
linux-image-5.15.0-1071-gcp (Ubuntu package) - addressed in versions 5.15.0-1071.79, 5.15.0-1071.79~20.04.1
linux-image-gcp (Ubuntu package) - update to 5.15.0.1071.79~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1072.72
linux-image-5.15.0-1072-aws (Ubuntu package) - update to 5.15.0-1072.78~20.04.1
linux-image-aws (Ubuntu package) - update to 5.15.0.1072.78~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1075.73
linux-image-5.15.0-1075-azure (Ubuntu package) - update to 5.15.0-1075.84
linux-image-5.15.0-1078-azure (Ubuntu package) - update to 5.15.0-1078.87~20.04.1
linux-image-azure (Ubuntu package) - update to 5.15.0.1078.87~20.04.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1078.87~20.04.1

External References

Related Security Bulletins