{
  "cveId": "CVE-2022-48857",
  "url": "https://patchblox.com/security/cve/CVE-2022-48857",
  "summary": "CVE-2022-48857 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48857, released July 16, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  NFC: port100: fix use-after-free in port100_send...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  NFC: port100: fix use-after-free in port100_send_complete  Syzbot reported UAF in port100_send_complete(). The root case is in missing usb_kill_urb() calls on error handling path of -\u003Eprobe function.  port100_send_complete() accesses devm allocated memory which will be freed on probe failure. We should kill this urbs before returning an error from probe function to prevent reported use-after-free  Fail log:  BUG: KASAN: use-after-free in port100_send_complete\u002B0x16e/0x1a0 drivers/nfc/port100.c:935 Read of size 1 at addr ffff88801bb59540 by task ksoftirqd/2/26 ... Call Trace:  \u003CTASK\u003E  __dump_stack lib/dump_stack.c:88 [inline]  dump_stack_lvl\u002B0xcd/0x134 lib/dump_stack.c:106  print_address_description.constprop.0.cold\u002B0x8d/0x303 mm/kasan/report.c:255  __kasan_report mm/kasan/report.c:442 [inline]  kasan_report.cold\u002B0x83/0xdf mm/kasan/report.c:459  port100_send_complete\u002B0x16e/0x1a0 drivers/nfc/port100.c:935  __usb_hcd_giveback_urb\u002B0x2b0/0x5c0 drivers/usb/core/hcd.c:1670  ...  Allocated by task 1255:  kasan_save_stack\u002B0x1e/0x40 mm/kasan/common.c:38  kasan_set_track mm/kasan/common.c:45 [inline]  set_alloc_info mm/kasan/common.c:436 [inline]  ____kasan_kmalloc mm/kasan/common.c:515 [inline]  ____kasan_kmalloc mm/kasan/common.c:474 [inline]  __kasan_kmalloc\u002B0xa6/0xd0 mm/kasan/common.c:524  alloc_dr drivers/base/devres.c:116 [inline]  devm_kmalloc\u002B0x96/0x1d0 drivers/base/devres.c:823  devm_kzalloc include/linux/device.h:209 [inline]  port100_probe\u002B0x8a/0x1320 drivers/nfc/port100.c:1502  Freed by task 1255:  kasan_save_stack\u002B0x1e/0x40 mm/kasan/common.c:38  kasan_set_track\u002B0x21/0x30 mm/kasan/common.c:45  kasan_set_free_info\u002B0x20/0x30 mm/kasan/generic.c:370  ____kasan_slab_free mm/kasan/common.c:366 [inline]  ____kasan_slab_free\u002B0xff/0x140 mm/kasan/common.c:328  kasan_slab_free include/linux/kasan.h:236 [inline]  __cache_free mm/slab.c:3437 [inline]  kfree\u002B0xf8/0x2b0 mm/slab.c:3794  release_nodes\u002B0x112/0x1a0 drivers/base/devres.c:501  devres_release_all\u002B0x114/0x190 drivers/base/devres.c:530  really_probe\u002B0x626/0xcc0 drivers/base/dd.c:670",
  "published": "2024-07-16T13:15:12Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00205,
  "epssPercentile": 0.10589,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.16.18-1",
      "fix": "DEBIAN-CVE-2022-48857",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48857",
      "released": "2024-07-16T13:15:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.16.18-1",
      "fix": "DEBIAN-CVE-2022-48857",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48857",
      "released": "2024-07-16T13:15:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.16.18-1",
      "fix": "DEBIAN-CVE-2022-48857",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48857",
      "released": "2024-07-16T13:15:12Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}