CVE Feed

    Dashboard / CVE / CVE-2022-48754

    CVE-2022-48754

    In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach(). The comment before the put_device() call says that the phydev might go away with put_device(). Fix potential use-after-free by calling phy_device_reset() before put_device().

    Published:Jun 20, 2024
    Last Modified:Aug 4, 2026
    EPS:Jun 20, 2024
    EPSS Score:0.00233
    CVSS Score:7.8

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Eus

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/67d271760b037ce0806d687ee6057edc8afd4205
    https://git.kernel.org/stable/c/aefaccd19379d6c4620269a162bfb88ff687f289
    https://git.kernel.org/stable/c/bd024e36f68174b1793906c39ca16cee0c9295c2
    https://git.kernel.org/stable/c/cb2fab10fc5e7a3aa1bb0a68a3abdcf3e37852af
    https://git.kernel.org/stable/c/cbda1b16687580d5beee38273f6241ae3725960c
    https://git.kernel.org/stable/c/f39027cbada43b33566c312e6be3db654ca3ad17
    https://git.kernel.org/stable/c/67d271760b037ce0806d687ee6057edc8afd4205
    https://git.kernel.org/stable/c/aefaccd19379d6c4620269a162bfb88ff687f289
    https://git.kernel.org/stable/c/bd024e36f68174b1793906c39ca16cee0c9295c2
    https://git.kernel.org/stable/c/cb2fab10fc5e7a3aa1bb0a68a3abdcf3e37852af
    https://git.kernel.org/stable/c/cbda1b16687580d5beee38273f6241ae3725960c
    https://git.kernel.org/stable/c/f39027cbada43b33566c312e6be3db654ca3ad17

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High