HomeDefectsLIN1024-2901
Acknowledged

LIN1024-2901 : Security Advisory - linux - CVE-2022-48782

Created: Jul 16, 2024    Updated: Jan 7, 2026
Resolved Date: Jul 16, 2024
Found In Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

mctp: fix use after free

Clang static analysis reports this problem
route.c:425:4: warning: Use of memory after it is freed
  trace_mctp_key_acquire(key);
  ^~~~~~~~~~~~~~~~~~~~~~~~~~~
When mctp_key_add() fails, key is freed but then is later
used in trace_mctp_key_acquire().  Add an else statement
to use the key only when mctp_key_add() is successful.

CREATE(Triage):(User=admin) CVE-2022-48782 (https://nvd.nist.gov/vuln/detail/CVE-2022-48782)