CVE-2022-48754 — phylib: fix potential use-after-free

Back Back to CVE browser

HIGH

phylib: fix potential use-after-free

Published Jun 20, 2024

8.4

HIGH

CVSS 3.1

EPSS 0.23%

Description

Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach().

The comment before the put_device() call says that the phydev might go away with put_device().

Fix potential use-after-free by calling phy_device_reset() before put_device().

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  4.16
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.16
- Version
  4.19.228
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.96
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.19
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.16.5
  Status
  unaffected
  Constraints
  <=5.16.*
- Version
  5.17
  Status
  unaffected
  Constraints
  <=*
- Version
  5.4.176
  Status
  unaffected
  Constraints
  <=5.4.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
4.16	affected	-
0	unaffected	<4.16
4.19.228	unaffected	<=4.19.*
5.10.96	unaffected	<=5.10.*
5.15.19	unaffected	<=5.15.*
5.16.5	unaffected	<=5.16.*
5.17	unaffected	<=*
5.4.176	unaffected	<=5.4.*

Vendor Linux Product Linux Kernel Default
n/a
- Version
  4.16
  Status
  affected
  Constraints
  -
Vendor Linux Product Linux Kernel Default
n/a
- Version
  bafbdd527d56
  Status
  affected
  Constraints
  <67d271760b03
- Version
  bafbdd527d56
  Status
  affected
  Constraints
  <aefaccd19379
- Version
  bafbdd527d56
  Status
  affected
  Constraints
  <bd024e36f681
- Version
  bafbdd527d56
  Status
  affected
  Constraints
  <cb2fab10fc5e
- Version
  bafbdd527d56
  Status
  affected
  Constraints
  <cbda1b166875
- Version
  bafbdd527d56
  Status
  affected
  Constraints
  <f39027cbada4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

Linux Kernel

n/a

Version	Status	Constraints
4.16	affected	-

Linux

Linux Kernel

n/a

Version	Status	Constraints
bafbdd527d56	affected	<67d271760b03
bafbdd527d56	affected	<aefaccd19379
bafbdd527d56	affected	<bd024e36f681
bafbdd527d56	affected	<cb2fab10fc5e
bafbdd527d56	affected	<cbda1b166875
bafbdd527d56	affected	<f39027cbada4

Red Hat Enterprise Linux 8

kernel-0:4.18.0-553.22.1.el8_10

Fixed · RHSA-2024:7000
Red Hat Enterprise Linux 8

kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10

Fixed · RHSA-2024:7001
Red Hat Enterprise Linux 8.8 Extended Update Support

kernel-0:4.18.0-477.70.1.el8_8

Fixed · RHSA-2024:6206
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	kernel-0:4.18.0-553.22.1.el8_10	Fixed	RHSA-2024:7000
Red Hat Enterprise Linux 8	kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10	Fixed	RHSA-2024:7001
Red Hat Enterprise Linux 8.8 Extended Update Support	kernel-0:4.18.0-477.70.1.el8_8	Fixed	RHSA-2024:6206
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.23% 0.00227

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00227

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.23% (0.00227)	12.19th	v5 (v2026.06.15)
Jun 15, 2026	0.23% (0.00233)	13.94th	v5 (v2026.06.15)
Mar 17, 2025	0.05% (0.00048)	12.05th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	12.15th	v3 (v2023.03.01)
Jun 21, 2024	0.04% (0.00044)	10.36th	v3 (v2023.03.01)

Weaknesses (1)

CWE-416

Use After Free

References (11)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48754		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2293304		Issue Tracking
https://git.kernel.org/stable/c/67d271760b037ce0806d687ee6057edc8afd4205		Patch
https://git.kernel.org/stable/c/aefaccd19379d6c4620269a162bfb88ff687f289		Patch
https://git.kernel.org/stable/c/bd024e36f68174b1793906c39ca16cee0c9295c2		Patch
https://git.kernel.org/stable/c/cb2fab10fc5e7a3aa1bb0a68a3abdcf3e37852af		Patch
https://git.kernel.org/stable/c/cbda1b16687580d5beee38273f6241ae3725960c		Patch
https://git.kernel.org/stable/c/f39027cbada43b33566c312e6be3db654ca3ad17		Patch
https://lore.kernel.org/linux-cve-announce/2024062006-CVE-2022-48754-4012@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48754
https://www.cve.org/CVERecord?id=CVE-2022-48754