Back
CVE-2022-48626
moxart: fix potential use-after-free on remove path
High7.8EPSS 0.31%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and using it instead of the pointer dereference.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.31% · top 76% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < f5dc193167591e88797262ec78515a0cbe79ff5f
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < 9c25d5ff1856b91bd4365e813f566cb59aaa9552
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < 3a0a7ec5574b510b067cfc734b8bdb6564b31d4e
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < be93028d306dac9f5b59ebebd9ec7abcfc69c156
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < af0e6c49438b1596e4be8a267d218a0c88a42323
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < 7f901d53f120d1921f84f7b9b118e87e94b403c5
- affected 1b66e94e6b9995323190f31c51d8e1a6f516627e – < bd2db32e7c3e35bd4d9b8bbff689434a50893546
- affected 3.16
- unaffected < 3.16
- unaffected 4.9.301 – ≤ 4.9.*
- unaffected 4.14.266 – ≤ 4.14.*
- unaffected 4.19.229 – ≤ 4.19.*
- unaffected 5.4.179 – ≤ 5.4.*
- unaffected 5.10.100 – ≤ 5.10.*
- unaffected 5.15.23 – ≤ 5.15.*
- unaffected 5.16.9 – ≤ 5.16.*
- unaffected 5.17 – ≤ *
References (8)
- https://git.kernel.org/stable/c/f5dc193167591e88797262ec78515a0cbe79ff5f (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/9c25d5ff1856b91bd4365e813f566cb59aaa9552 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/3a0a7ec5574b510b067cfc734b8bdb6564b31d4e (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/be93028d306dac9f5b59ebebd9ec7abcfc69c156 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/af0e6c49438b1596e4be8a267d218a0c88a42323 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/7f901d53f120d1921f84f7b9b118e87e94b403c5 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/bd2db32e7c3e35bd4d9b8bbff689434a50893546 (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-48626)Record last updated .