{
  "cveId": "CVE-2022-48666",
  "url": "https://patchblox.com/security/cve/CVE-2022-48666",
  "summary": "CVE-2022-48666 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48666, released April 28, 2024. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: core: Fix a use-after-free  There are two...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  scsi: core: Fix a use-after-free  There are two .exit_cmd_priv implementations. Both implementations use resources associated with the SCSI host. Make sure that these resources are still available when .exit_cmd_priv is called by waiting inside scsi_remove_host() until the tag set has been freed.  This commit fixes the following use-after-free:  ================================================================== BUG: KASAN: use-after-free in srp_exit_cmd_priv\u002B0x27/0xd0 [ib_srp] Read of size 8 at addr ffff888100337000 by task multipathd/16727 Call Trace:  \u003CTASK\u003E  dump_stack_lvl\u002B0x34/0x44  print_report.cold\u002B0x5e/0x5db  kasan_report\u002B0xab/0x120  srp_exit_cmd_priv\u002B0x27/0xd0 [ib_srp]  scsi_mq_exit_request\u002B0x4d/0x70  blk_mq_free_rqs\u002B0x143/0x410  __blk_mq_free_map_and_rqs\u002B0x6e/0x100  blk_mq_free_tag_set\u002B0x2b/0x160  scsi_host_dev_release\u002B0xf3/0x1a0  device_release\u002B0x54/0xe0  kobject_put\u002B0xa5/0x120  device_release\u002B0x54/0xe0  kobject_put\u002B0xa5/0x120  scsi_device_dev_release_usercontext\u002B0x4c1/0x4e0  execute_in_process_context\u002B0x23/0x90  device_release\u002B0x54/0xe0  kobject_put\u002B0xa5/0x120  scsi_disk_release\u002B0x3f/0x50  device_release\u002B0x54/0xe0  kobject_put\u002B0xa5/0x120  disk_release\u002B0x17f/0x1b0  device_release\u002B0x54/0xe0  kobject_put\u002B0xa5/0x120  dm_put_table_device\u002B0xa3/0x160 [dm_mod]  dm_put_device\u002B0xd0/0x140 [dm_mod]  free_priority_group\u002B0xd8/0x110 [dm_multipath]  free_multipath\u002B0x94/0xe0 [dm_multipath]  dm_table_destroy\u002B0xa2/0x1e0 [dm_mod]  __dm_destroy\u002B0x196/0x350 [dm_mod]  dev_remove\u002B0x10c/0x160 [dm_mod]  ctl_ioctl\u002B0x2c2/0x590 [dm_mod]  dm_ctl_ioctl\u002B0x5/0x10 [dm_mod]  __x64_sys_ioctl\u002B0xb4/0xf0  dm_ctl_ioctl\u002B0x5/0x10 [dm_mod]  __x64_sys_ioctl\u002B0xb4/0xf0  do_syscall_64\u002B0x3b/0x90  entry_SYSCALL_64_after_hwframe\u002B0x46/0xb0",
  "published": "2024-04-28T13:15:08Z",
  "severity": "critical",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00777,
  "epssPercentile": 0.56072,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "5.10.223-1",
      "fix": "DSA-5747-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-5747-1",
      "released": "2024-08-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48666",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48666",
      "released": "2024-04-28T13:15:08Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48666",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48666",
      "released": "2024-04-28T13:15:08Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48666",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48666",
      "released": "2024-04-28T13:15:08Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}