PT-2024-11807

CVE-2022-48816

Published

2022-01-17

Updated

2026-10-09

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the SUNRPC component in the Linux kernel, where the ->sock can be set to NULL asynchronously unless the ->recv mutex is held. This can trigger an oops when a sysfs read is performed. A commit, 17f09d3f619a, attempts to fix this problem but only narrows the race window.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors