CVE-2022-48816: Linux Kernel

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a ("SUNRPC: Check if the xprt is connected before handling sysfs reads") appears to attempt to fix this problem, but it only narrows the race window.

Affected products

• Linux Linux Kernel: from 5.10.67, before 5.11 (fixed in 5.11); from 5.13.19, before 5.16.10 (fixed in 5.16.10); version 5.17 only

Published 2024-07-16. Last modified 2026-10-03.