CVE-2022-48884

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel, specifically in the net/mlx5 module. The issue occurs when a command fails while the driver is reloading and cannot accept firmware commands until the command interface is reinitialized. This results in a NULL pointer access as the command stats structure is being freed and reallocated during the mlx5 devlink reload. The fix involves making the command stats statically allocated on driver probe.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.