Name: CVE-2022-48425: Release of Invalid Pointer or Reference
Creator: Rapid7
Published: 2023-03-19T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-48425, CWE-763, CVSS 7.8, EPSS 0.00249

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	—	Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.117-72.142Upgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo	Jun 30, 2023	Mar 19, 2023
Amazon_linux_2023	—	Upgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-livepatch-6.1.19-30.43Upgrade python3-perfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.29-50.88Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-livepatch-6.1.29-47.49	Feb 17, 2025	Mar 18, 2023
Debian	—	Upgrade linux	Jul 30, 2024	Mar 19, 2023
Ubuntu	—	Upgrade linux-image-5.15.0-1041-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1037-ibmUpgrade linux-image-5.15.0-1041-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1039-intel-iotgUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.15.0-83-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1032-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-5.15.0-1044-awsUpgrade linux-image-5.15.0-1046-azureUpgrade linux-image-5.15.0-1046-azure-fdeUpgrade linux-image-5.15.0-1027-gkeopUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-83-genericUpgrade linux-image-5.15.0-83-generic-64kUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-83-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1042-oracleUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-5.15.0-1032-nvidiaUpgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-5.15.0-1041-gkeUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-5.15.0-1037-raspiUpgrade linux-image-5.15.0-83-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04	Sep 18, 2023	Mar 19, 2023
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Mar 19, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence