{
  "cveId": "CVE-2022-48719",
  "url": "https://patchblox.com/security/cve/CVE-2022-48719",
  "summary": "CVE-2022-48719 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48719, released June 20, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net, neigh: Do not trigger immediate probes on N...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work  syzkaller was able to trigger a deadlock for NTF_MANAGED entries [0]:    kworker/0:16/14617 is trying to acquire lock:   ffffffff8d4dd370 (\u0026tbl-\u003Elock){\u002B\u002B-.}-{2:2}, at: ___neigh_create\u002B0x9e1/0x2990 net/core/neighbour.c:652   [...]   but task is already holding lock:   ffffffff8d4dd370 (\u0026tbl-\u003Elock){\u002B\u002B-.}-{2:2}, at: neigh_managed_work\u002B0x35/0x250 net/core/neighbour.c:1572  The neighbor entry turned to NUD_FAILED state, where __neigh_event_send() triggered an immediate probe as per commit cd28ca0a3dd1 (\u0022neigh: reduce arp latency\u0022) via neigh_probe() given table lock was held.  One option to fix this situation is to defer the neigh_probe() back to the neigh_timer_handler() similarly as pre cd28ca0a3dd1. For the case of NTF_MANAGED, this deferral is acceptable given this only happens on actual failure state and regular / expected state is NUD_VALID with the entry already present.  The fix adds a parameter to __neigh_event_send() in order to communicate whether immediate probe is allowed or disallowed. Existing call-sites of neigh_event_send() default as-is to immediate probe. However, the neigh_managed_work() disables it via use of neigh_event_send_probe().  [0] \u003CTASK\u003E   __dump_stack lib/dump_stack.c:88 [inline]   dump_stack_lvl\u002B0xcd/0x134 lib/dump_stack.c:106   print_deadlock_bug kernel/locking/lockdep.c:2956 [inline]   check_deadlock kernel/locking/lockdep.c:2999 [inline]   validate_chain kernel/locking/lockdep.c:3788 [inline]   __lock_acquire.cold\u002B0x149/0x3ab kernel/locking/lockdep.c:5027   lock_acquire kernel/locking/lockdep.c:5639 [inline]   lock_acquire\u002B0x1ab/0x510 kernel/locking/lockdep.c:5604   __raw_write_lock_bh include/linux/rwlock_api_smp.h:202 [inline]   _raw_write_lock_bh\u002B0x2f/0x40 kernel/locking/spinlock.c:334   ___neigh_create\u002B0x9e1/0x2990 net/core/neighbour.c:652   ip6_finish_output2\u002B0x1070/0x14f0 net/ipv6/ip6_output.c:123   __ip6_finish_output net/ipv6/ip6_output.c:191 [inline]   __ip6_finish_output\u002B0x61e/0xe90 net/ipv6/ip6_output.c:170   ip6_finish_output\u002B0x32/0x200 net/ipv6/ip6_output.c:201   NF_HOOK_COND include/linux/netfilter.h:296 [inline]   ip6_output\u002B0x1e4/0x530 net/ipv6/ip6_output.c:224   dst_output include/net/dst.h:451 [inline]   NF_HOOK include/linux/netfilter.h:307 [inline]   ndisc_send_skb\u002B0xa99/0x17f0 net/ipv6/ndisc.c:508   ndisc_send_ns\u002B0x3a9/0x840 net/ipv6/ndisc.c:650   ndisc_solicit\u002B0x2cd/0x4f0 net/ipv6/ndisc.c:742   neigh_probe\u002B0xc2/0x110 net/core/neighbour.c:1040   __neigh_event_send\u002B0x37d/0x1570 net/core/neighbour.c:1201   neigh_event_send include/net/neighbour.h:470 [inline]   neigh_managed_work\u002B0x162/0x250 net/core/neighbour.c:1574   process_one_work\u002B0x9ac/0x1650 kernel/workqueue.c:2307   worker_thread\u002B0x657/0x1110 kernel/workqueue.c:2454   kthread\u002B0x2e9/0x3a0 kernel/kthread.c:377   ret_from_fork\u002B0x1f/0x30 arch/x86/entry/entry_64.S:295   \u003C/TASK\u003E",
  "published": "2024-06-20T11:15:55Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00141,
  "epssPercentile": 0.03468,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48719",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48719",
      "released": "2024-06-20T11:15:55Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48719",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48719",
      "released": "2024-06-20T11:15:55Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48719",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48719",
      "released": "2024-06-20T11:15:55Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}