CVE-2022-48783

Name: CVE-2022-48783
Creator: NVD / NIST
Published: 2024-07-16T12:15:03.35+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.8/10EPSS 0.23%

Last modified Jun 17, 2026

CVE-2022-48783 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_put(priv->ds->slave_mii_bus->dev.of_node) should be done before mdiobus_free(priv->ds->slave_mii_bus).. EPSS estimates a 0.23% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_put(priv->ds->slave_mii_bus->dev.of_node) should be done before mdiobus_free(priv->ds->slave_mii_bus).

Metrics

CVSS 3.1

7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

0.23%

13.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-416

Affected Software

Vendor	Product	Versions
Linux	Linux Kernel	5.10.101
Linux	Linux Kernel	5.15.24
Linux	Linux Kernel	5.16.10

References

https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587dMailing List, Patch
https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cbMailing List, Patch
https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005eMailing List, Patch
https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165Mailing List, Patch
https://git.kernel.org/stable/c/8c6ae46150a453f8ae9a6cd49b45f354f478587dMailing List, Patch
https://git.kernel.org/stable/c/c61f599b8d33adfa256126a6695c734c0de331cbMailing List, Patch
https://git.kernel.org/stable/c/df2495f329b08ac0d0d3e6334a01955ae839005eMailing List, Patch
https://git.kernel.org/stable/c/f48bd34137718042872d06f2c7332b3267a29165Mailing List, Patch

Timeline

Published: Jul 16, 2024
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-48783?

How severe is CVE-2022-48783?

CVE-2022-48783 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.23% probability of exploitation in the next 30 days.

How do I fix CVE-2022-48783?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-48783?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST