阿里云漏洞库

CVE编号

CVE-2022-48841

利用情况

暂无

补丁情况

官方补丁

披露时间

2024-07-16

In the Linux kernel, the following vulnerability has been resolved:

ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()

It is possible to do NULL pointer dereference in routine that updates

Tx ring stats. Currently only stats and bytes are updated when ring

pointer is valid, but later on ring is accessed to propagate gathered Tx

stats onto VSI stats.

Change the existing logic to move to next ring when ring is NULL.

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://access.redhat.com/security/cve/CVE-2022-48841
https://git.kernel.org/stable/c/2397270ec97c5e3009a58ac110a25e1869e9d6ff
https://git.kernel.org/stable/c/f153546913bada41a811722f2c6d17c3243a0333
https://lore.kernel.org/linux-cve-announce/2024071622-CVE-2022-48841-67c8@gregkh/T

CWE-ID	漏洞类型
CWE-476	空指针解引用