CVE-2022-48686
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
In the Linux kernel, the nvme-tcp module has a use-after-free vulnerability when detecting digest errors. The fix requires breaking out of the io_work loop after setting rd_enabled to true, to avoid reading data from an out-of-sync or corrupted TCP stream.
Risk Assessment
The vulnerability may lead to use-after-free, potentially causing system crashes, information leaks, or privilege escalation.
Recommendation
Apply the Linux kernel update containing the fix for CVE-2022-48686.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted.