Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2022-48960: Linux kernel may access freed network data

CVE-2022-48960 · published 2 years ago
Summary

The Linux kernel's network driver for certain HiSilicon hardware could reference a data packet after it has been released, potentially causing crashes or instability. This affects Linux distributions that include the kernel, such as standard Linux, Azure, AWS, and Ubuntu LTS releases. Updating the kernel to the latest version provided by your Linux vendor will apply the fix.

What to do
  • Update canonical linux-azure to version 4.15.0-1162.177~14.04.1.
  • Update canonical linux-aws-hwe to version 4.15.0-1151.164~16.04.1.
  • Update canonical linux-azure to version 4.15.0-1162.177~16.04.1.
  • Update canonical linux-gcp to version 4.15.0-1146.162~16.04.1.
  • Update canonical linux-hwe to version 4.15.0-206.217~16.04.1.
  • Update canonical linux-oracle to version 4.15.0-1115.126~16.04.1.
  • Update canonical linux to version 4.15.0-206.217.
  • Update canonical linux-aws to version 4.15.0-1151.164.
  • Update canonical linux-aws-5.4 to version 5.4.0-1097.105~18.04.1.
  • Update canonical linux-azure-4.15 to version 4.15.0-1162.177.
  • Update canonical linux-azure-5.4 to version 5.4.0-1104.110~18.04.1.
  • Update canonical linux-gcp-4.15 to version 4.15.0-1146.162.
  • Update canonical linux-gcp-5.4 to version 5.4.0-1101.110~18.04.1.
  • Update canonical linux-hwe-5.4 to version 5.4.0-144.161~18.04.1.
  • Update canonical linux-ibm-5.4 to version 5.4.0-1045.50~18.04.1.
  • Update canonical linux-kvm to version 4.15.0-1136.141.
  • Update canonical linux-oracle to version 4.15.0-1115.126.
  • Update canonical linux-oracle-5.4 to version 5.4.0-1094.103~18.04.1.
  • Update canonical linux-raspi-5.4 to version 5.4.0-1081.92~18.04.1.
  • Update canonical linux-aws-fips to version 4.15.0-2090.96.
  • Update canonical linux-azure-fips to version 4.15.0-2071.77.
  • Update canonical linux-fips to version 4.15.0-1108.119.
  • Update canonical linux-gcp-fips to version 4.15.0-2055.60.
  • Update canonical linux to version 5.4.0-144.161.
  • Update canonical linux-aws to version 5.4.0-1097.105.
  • Update canonical linux-aws-5.15 to version 5.15.0-1031.35~20.04.1.
  • Update canonical linux-azure to version 5.4.0-1104.110.
  • Update canonical linux-azure-5.15 to version 5.15.0-1034.41~20.04.1.
  • Update canonical linux-bluefield to version 5.4.0-1059.65.
  • Update canonical linux-gcp to version 5.4.0-1101.110.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1030.37~20.04.1.
  • Update canonical linux-gkeop to version 5.4.0-1065.69.
  • Update canonical linux-gkeop-5.15 to version 5.15.0-1016.21~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-67.74~20.04.1.
  • Update canonical linux-ibm to version 5.4.0-1045.50.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1026.31~20.04.1.
  • Update canonical linux-iot to version 5.4.0-1013.15.
  • Update canonical linux-kvm to version 5.4.0-1087.93.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-67.74~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1014.14~20.04.1.
  • Update canonical linux-oracle to version 5.4.0-1094.103.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1030.36~20.04.1.
  • Update canonical linux-raspi to version 5.4.0-1081.92.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1030.34~20.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.4.0-1022.26.
  • Update canonical linux-aws-fips to version 5.4.0-1099.107+fips1.
  • Update canonical linux-azure-fips to version 5.4.0-1104.110+fips1.
  • Update canonical linux-fips to version 5.4.0-1073.82.
  • Update canonical linux-gcp-fips to version 5.4.0-1101.110+fips1.
  • Update canonical linux to version 5.15.0-67.74.
  • Update canonical linux-aws to version 5.15.0-1031.35.
  • Update canonical linux-azure to version 5.15.0-1034.41.
  • Update canonical linux-azure-fde to version 5.15.0-1034.41.1.
  • Update canonical linux-gcp to version 5.15.0-1030.37.
  • Update canonical linux-gke to version 5.15.0-1028.33.
  • Update canonical linux-gkeop to version 5.15.0-1016.21.
  • Update canonical linux-ibm to version 5.15.0-1026.29.
  • Update canonical linux-intel-iotg to version 5.15.0-1026.31.
  • Update canonical linux-kvm to version 5.15.0-1029.34.
  • Update canonical linux-lowlatency to version 5.15.0-67.74.
  • Update canonical linux-nvidia to version 5.15.0-1023.23.
  • Update canonical linux-oracle to version 5.15.0-1030.36.
  • Update canonical linux-raspi to version 5.15.0-1025.27.
  • Update canonical linux-bluefield to version 5.15.0-1014.16.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1022.27.
  • Update canonical linux-realtime to version 5.15.0-1033.36.
  • Update linux kernel to version 6.0.13.
  • Update debian linux to version 6.1.4-1.
  • Update linux linux to version 179499e7a240b2ef590f05eb379c810c26bbc8a4 or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 3.16, < 4.9.336
>= 4.10, < 4.14.302
>= 4.15, < 4.19.269
>= 4.20, < 5.4.227
>= 5.5, < 5.10.159
>= 5.11, < 5.15.83
>= 5.16, < 6.0.13
6.1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:Pro:14.04:LTS canonical linux-azure < 4.15.0-1162.177~14.04.1
Fix: upgrade to 4.15.0-1162.177~14.04.1
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe < 4.15.0-1151.164~16.04.1
Fix: upgrade to 4.15.0-1151.164~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-azure < 4.15.0-1162.177~16.04.1
Fix: upgrade to 4.15.0-1162.177~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-gcp < 4.15.0-1146.162~16.04.1
Fix: upgrade to 4.15.0-1146.162~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-hwe < 4.15.0-206.217~16.04.1
Fix: upgrade to 4.15.0-206.217~16.04.1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle < 4.15.0-1115.126~16.04.1
Fix: upgrade to 4.15.0-1115.126~16.04.1
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:18.04:LTS canonical linux < 4.15.0-206.217
Fix: upgrade to 4.15.0-206.217
Ubuntu:18.04:LTS canonical linux-aws < 4.15.0-1151.164
Fix: upgrade to 4.15.0-1151.164
Ubuntu:18.04:LTS canonical linux-aws-5.4 < 5.4.0-1097.105~18.04.1
Fix: upgrade to 5.4.0-1097.105~18.04.1
Ubuntu:18.04:LTS canonical linux-azure-4.15 < 4.15.0-1162.177
Fix: upgrade to 4.15.0-1162.177
Ubuntu:18.04:LTS canonical linux-azure-5.4 < 5.4.0-1104.110~18.04.1
Fix: upgrade to 5.4.0-1104.110~18.04.1
Ubuntu:18.04:LTS canonical linux-gcp-4.15 < 4.15.0-1146.162
Fix: upgrade to 4.15.0-1146.162
– linux linux < 179499e7a240b2ef590f05eb379c810c26bbc8a4
3.16
Ubuntu:18.04:LTS canonical linux-gcp-5.4 < 5.4.0-1101.110~18.04.1
Fix: upgrade to 5.4.0-1101.110~18.04.1
Ubuntu:18.04:LTS canonical linux-hwe-5.4 < 5.4.0-144.161~18.04.1
Fix: upgrade to 5.4.0-144.161~18.04.1
Ubuntu:18.04:LTS canonical linux-ibm-5.4 < 5.4.0-1045.50~18.04.1
Fix: upgrade to 5.4.0-1045.50~18.04.1
Ubuntu:18.04:LTS canonical linux-kvm < 4.15.0-1136.141
Fix: upgrade to 4.15.0-1136.141
Ubuntu:18.04:LTS canonical linux-oracle < 4.15.0-1115.126
Fix: upgrade to 4.15.0-1115.126
Ubuntu:18.04:LTS canonical linux-oracle-5.4 < 5.4.0-1094.103~18.04.1
Fix: upgrade to 5.4.0-1094.103~18.04.1
Ubuntu:18.04:LTS canonical linux-raspi-5.4 < 5.4.0-1081.92~18.04.1
Fix: upgrade to 5.4.0-1081.92~18.04.1
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips < 4.15.0-2090.96
Fix: upgrade to 4.15.0-2090.96
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips < 4.15.0-2071.77
Fix: upgrade to 4.15.0-2071.77
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips < 4.15.0-1108.119
Fix: upgrade to 4.15.0-1108.119
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips < 4.15.0-2055.60
Fix: upgrade to 4.15.0-2055.60
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Showing 50 of 161. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux < 5.4.0-144.161
Fix: upgrade to 5.4.0-144.161
Ubuntu:20.04:LTS canonical linux-aws < 5.4.0-1097.105
Fix: upgrade to 5.4.0-1097.105
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1031.35~20.04.1
Fix: upgrade to 5.15.0-1031.35~20.04.1
Ubuntu:20.04:LTS canonical linux-azure < 5.4.0-1104.110
Fix: upgrade to 5.4.0-1104.110
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1034.41~20.04.1
Fix: upgrade to 5.15.0-1034.41~20.04.1
Ubuntu:20.04:LTS canonical linux-bluefield < 5.4.0-1059.65
Fix: upgrade to 5.4.0-1059.65
Ubuntu:20.04:LTS canonical linux-gcp < 5.4.0-1101.110
Fix: upgrade to 5.4.0-1101.110
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1030.37~20.04.1
Fix: upgrade to 5.15.0-1030.37~20.04.1
Ubuntu:20.04:LTS canonical linux-gkeop < 5.4.0-1065.69
Fix: upgrade to 5.4.0-1065.69
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 < 5.15.0-1016.21~20.04.1
Fix: upgrade to 5.15.0-1016.21~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-67.74~20.04.1
Fix: upgrade to 5.15.0-67.74~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm < 5.4.0-1045.50
Fix: upgrade to 5.4.0-1045.50
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1026.31~20.04.1
Fix: upgrade to 5.15.0-1026.31~20.04.1
Ubuntu:20.04:LTS canonical linux-iot < 5.4.0-1013.15
Fix: upgrade to 5.4.0-1013.15
Ubuntu:20.04:LTS canonical linux-kvm < 5.4.0-1087.93
Fix: upgrade to 5.4.0-1087.93
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-67.74~20.04.1
Fix: upgrade to 5.15.0-67.74~20.04.1
Ubuntu:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1014.14~20.04.1
Fix: upgrade to 5.15.0-1014.14~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle < 5.4.0-1094.103
Fix: upgrade to 5.4.0-1094.103
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1030.36~20.04.1
Fix: upgrade to 5.15.0-1030.36~20.04.1
Ubuntu:20.04:LTS canonical linux-raspi < 5.4.0-1081.92
Fix: upgrade to 5.4.0-1081.92
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1030.34~20.04.1
Fix: upgrade to 5.15.0-1030.34~20.04.1
Ubuntu:20.04:LTS canonical linux-xilinx-zynqmp < 5.4.0-1022.26
Fix: upgrade to 5.4.0-1022.26
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips < 5.4.0-1099.107+fips1
Fix: upgrade to 5.4.0-1099.107+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips < 5.4.0-1104.110+fips1
Fix: upgrade to 5.4.0-1104.110+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips < 5.4.0-1073.82
Fix: upgrade to 5.4.0-1073.82
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips < 5.4.0-1101.110+fips1
Fix: upgrade to 5.4.0-1101.110+fips1
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-67.74
Fix: upgrade to 5.15.0-67.74
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1031.35
Fix: upgrade to 5.15.0-1031.35
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1034.41
Fix: upgrade to 5.15.0-1034.41
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1034.41.1
Fix: upgrade to 5.15.0-1034.41.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1030.37
Fix: upgrade to 5.15.0-1030.37
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1028.33
Fix: upgrade to 5.15.0-1028.33
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1016.21
Fix: upgrade to 5.15.0-1016.21
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1026.29
Fix: upgrade to 5.15.0-1026.29
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1026.31
Fix: upgrade to 5.15.0-1026.31
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1029.34
Fix: upgrade to 5.15.0-1029.34
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-67.74
Fix: upgrade to 5.15.0-67.74
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1023.23
Fix: upgrade to 5.15.0-1023.23
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1030.36
Fix: upgrade to 5.15.0-1030.36
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1025.27
Fix: upgrade to 5.15.0-1025.27
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1014.16
Fix: upgrade to 5.15.0-1014.16
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1022.27
Fix: upgrade to 5.15.0-1022.27
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1033.36
Fix: upgrade to 5.15.0-1033.36
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:26.04 canonical linux-nvidia All versions
Linux linux kernel >= 5.16.0, < 6.0.13
Fix: upgrade to 6.0.13
Debian:12 debian linux < 6.1.4-1
Fix: upgrade to 6.1.4-1
Original advisory text
net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb is delivered to napi_gro_receive() which may free it, after calling this, dereferencing skb may trigger use-after-free.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published21 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta