CVE-2022-48841
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jul 16, 2024
Updated: Jul 17, 2024
CWE ID 476
Summary
CVE-2022-48841 is a vulnerability affecting the Linux kernel where a NULL pointer dereference can occur in the `ice_update_vsi_tx_ring_stats()` function. This issue arises when the routine attempts to update Tx ring stats with a NULL pointer. The consequences of this vulnerability are that the system may crash or be susceptible to arbitrary code execution. To address this issue, developers have modified the logic to move on to the next ring when encountering a NULL pointer instead of attempting to access it.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share