---
cve: "CVE-2022-48695"
severity: "HIGH"
cvss: 7.8
epss: "0.2%"
vendor: "Linux"
kev: false
exploited: false
published: "2024-05-03 17:44:55"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-21T18:40:53+02:00"
---

# CVE-2022-48695

> 7.8 HIGH

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Fix use-after-free warning

Fix the following use-after-free warning which is observed during
controller reset:

refcount_t: underflow; use-after-free.
WARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Patch verfügbar (OSV)

- Kernel ≥ 4.9.328
- Kernel ≥ 4.14.293
- Kernel ≥ 4.19.258
- Kernel ≥ 5.4.213
- Kernel ≥ 5.10.143
- Kernel ≥ 5.15.68
- Kernel ≥ 5.19.9

## Referenzen

- <https://git.kernel.org/stable/c/b8fc9e91b931215110ba824d1a2983c5f60b6f82>
- <https://git.kernel.org/stable/c/d4959d09b76eb7a4146f5133962b88d3bddb63d6>
- <https://git.kernel.org/stable/c/82efb917eeb27454dc4c6fe26432fc8f6c75bc16>
- <https://git.kernel.org/stable/c/5682c94644fde72f72bded6580c38189ffc856b5>
- <https://git.kernel.org/stable/c/ea10a652ad2ae2cf3eced6f632a5c98f26727057>
- <https://git.kernel.org/stable/c/6229fa494a5949be209bc73afbc5d0a749c2e3c7>
- <https://git.kernel.org/stable/c/41acb064c4e013808bc7d5fc1b506fa449425b0b>
- <https://git.kernel.org/stable/c/991df3dd5144f2e6b1c38b8d20ed3d4d21e20b34>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2022-48695) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_