CVE-2022-48674

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the erofs file system, specifically in the erofs workgroup unfreeze() function. This vulnerability can cause a race condition, allowing an attacker to potentially impact the confidentiality, integrity, and availability of protected information. The root cause is that erofs workgroup unfreeze() doesn't reset to orig val, thus causing the pcluster to reuse unexpectedly before freeing. This path is considered unnecessary since UP platforms are quite rare now.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.