CVE-2022-48748: Linux Kernel

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in __allowed_ingress When using per-vlan state, if vlan snooping and stats are disabled, untagged or priority-tagged ingress frame will go to check pvid state. If the port state is forwarding and the pvid state is not learning/forwarding, untagged or priority-tagged frame will be dropped but skb memory is not freed. Should free skb when __allowed_ingress returns false.

Affected products

• Linux Linux Kernel: from 5.6, before 5.10.96 (fixed in 5.10.96); from 5.11, before 5.15.19 (fixed in 5.15.19); from 5.16, before 5.16.5 (fixed in 5.16.5); version 5.17 only

Published 2024-06-20. Last modified 2026-06-17.