CVE Database
/

CVE-2022-48754

Back to search

CVE-2022-48754

Published: Jun 20, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach(). The comment before the put_device() call says that the phydev might go away with put_device(). Fix potential use-after-free by calling phy_device_reset() before put_device().

VendorProductVersions

Linux

Linux

affected
bafbdd527d569c8200521f2f7579f65a044271be - < 67d271760b037ce0806d687ee6057edc8afd4205
affected
bafbdd527d569c8200521f2f7579f65a044271be - < f39027cbada43b33566c312e6be3db654ca3ad17
affected
bafbdd527d569c8200521f2f7579f65a044271be - < bd024e36f68174b1793906c39ca16cee0c9295c2
affected
bafbdd527d569c8200521f2f7579f65a044271be - < aefaccd19379d6c4620269a162bfb88ff687f289
affected
bafbdd527d569c8200521f2f7579f65a044271be - < cb2fab10fc5e7a3aa1bb0a68a3abdcf3e37852af

+1 more versions

Linux

Linux

affected
4.16
unaffected
0 - < 4.16
unaffected
4.19.228 - <= 4.19.*
unaffected
5.4.176 - <= 5.4.*
unaffected
5.10.96 - <= 5.10.*

+3 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now