VDB

CESS-2022-48962

CESS-2022-48962 PUBLISHED CVSS 7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Timeline

  • Oct 21, 2024 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›