{
  "cveId": "CVE-2022-48943",
  "url": "https://patchblox.com/security/cve/CVE-2022-48943",
  "summary": "CVE-2022-48943 is fixed in 27 products on 1 platform, first by RHSA-2022:7683, released November 8, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* off-path...",
  "description": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* off-path attacker may inject data or terminate victim\u0027s TCP session (CVE-2020-36516)\n\n* race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference (CVE-2020-36558)\n\n* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)\n\n* memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c (CVE-2021-30002)\n\n* smb2_ioctl_query_info NULL Pointer Dereference (CVE-2022-0168)\n\n* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)\n\n* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)\n\n* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)\n\n* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)\n\n* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)\n\n* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)\n\n* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)\n\n* buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)\n\n* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)\n\n* openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)\n\n* use-after-free when psi trigger is destroyed while being polled (CVE-2022-2938)\n\n* net/packet: slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)\n\n* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)\n\n* Spectre-BHB (CVE-2022-23960)\n\n* Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)\n\n* memory leak in drivers/hid/hid-elo.c (CVE-2022-27950)\n\n* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)\n\n* use after free in SUNRPC subsystem (CVE-2022-28893)\n\n* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)\n\n* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)\n\n* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.",
  "published": "2022-11-08T00:00:00Z",
  "severity": "Moderate",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00247,
  "epssPercentile": 0.16108,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-stablelists",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-stablelists",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.16.12-1",
      "fix": "DEBIAN-CVE-2022-48943",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48943",
      "released": "2024-08-22T04:15:19Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.16.12-1",
      "fix": "DEBIAN-CVE-2022-48943",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48943",
      "released": "2024-08-22T04:15:19Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.16.12-1",
      "fix": "DEBIAN-CVE-2022-48943",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48943",
      "released": "2024-08-22T04:15:19Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-425.3.1.el8",
      "fix": "RHSA-2022:7683",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-7683",
      "released": "2022-11-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-162.6.1.el9_1",
      "fix": "RHSA-2022:8267",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-8267",
      "released": "2022-11-15T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}