Back
CVE-2022-48879
efi: fix NULL-deref in init error path
Medium5.5EPSS 0.24%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have been disabled, the runtime services workqueue will never have been allocated. Do not try to destroy the workqueue unconditionally in the unlikely event that EFI initialisation fails to avoid dereferencing a NULL pointer.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (5 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 2ff3c97b47521d6700cc6485c7935908dcd2c27c – < 585a0b2b3ae7903c6abee3087d09c69e955a7794
- affected 5167f194da6947e19a3e970485ee3ccb44f7958d – < 5fcf75a8a4c3e7ee9122d143684083c9faf20452
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < 4ca71bc0e1995d15486cd7b60845602a28399cb5
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < e2ea55564229e4bea1474af15b111b3a3043b76f
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < adc96d30f6503d30dc68670c013716f1d9fcc747
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < 703c13fe3c9af557d312f5895ed6a5fda2711104
- affected f591a42b8f9a9d20e01d0462f4f55d2176ac52ec
- affected e6584124b9823151ef586d10dedf565ade50cea6
- affected 4.19.142 – < 4.19.270
- affected 5.4.61 – < 5.4.229
- affected 5.7.18 – < 5.8
- affected 5.8.4 – < 5.9
- affected 5.9
- unaffected < 5.9
- unaffected 4.19.270 – ≤ 4.19.*
- unaffected 5.4.229 – ≤ 5.4.*
- unaffected 5.10.164 – ≤ 5.10.*
- unaffected 5.15.89 – ≤ 5.15.*
- unaffected 6.1.7 – ≤ 6.1.*
- unaffected 6.2 – ≤ *
References (6)
- https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794 (opens in a new tab)
- https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452 (opens in a new tab)
- https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5 (opens in a new tab)
- https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f (opens in a new tab)
- https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747 (opens in a new tab)
- https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-48879)Record last updated .