CVE-2022-48851

CriticalCVSS 9.8

Published: 16/07/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

41th percentile - higher than 41% of all known CVEs

Summary

In the Linux kernel, the staging subsystem (gdm724x) has a use-after-free (UAF) vulnerability in gdm_lte_rx(). The netif_rx_ni() function frees the skb, and then the code tries to read skb->len, leading to access of freed memory.

Risk Assessment

The vulnerability may lead to system crashes or potentially code execution in kernel context, especially on systems using GDM724x LTE devices.

Recommendation

Apply the Linux kernel update containing the fix for CVE-2022-48851. Update systems with the gdm724x driver enabled.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdm_lte_rx() The netif_rx_ni() function frees the skb so we can't dereference it to save the skb->len.