CVE-2022-48858

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a race condition in the net/mlx5 component of the Linux kernel, which can lead to a refcount use after free warning. This occurs when one command releases its last refcount and frees its index and entry, while another process running the command flush flow takes a refcount to this command entry. The process handling commands flush may see this command as needed to be flushed if the other process released its refcount but didn't release the index yet. The fix involves adding a needed spin lock to resolve the race condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.