01 Record

CVE-2022-48671

cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.18% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 7.7% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-03 14:50Z2 YR AGO

Last updated

2026-05-11 18:44Z3 MO AGO

Reserved

2024-02-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 5.5)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-667Improper LockingClass

Data version

5.2

Document digest

38d8e46055651259b1adf15b5e282e6648fcee3055dd6ecc111f22d5ca70c1f4

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe446300968c6bd25d9cd6c33b9600780a39b3975 to < 321488cfac7d0eb6d97de467015ff754f85813ff, 59c6902a96b4439e07c25ef86a4593bea5481c3b to < 07191f984842d50020789ff14c75da436a7f46a9, dee1e2b18cf5426eed985512ccc6636ec69dbdd6 to < 9f267393b036f1470fb12fb892d59e7ff8aeb58d, 3bf4bf54069f9b62a54988e5d085023c17a66c90 to < 5db17805b6ba4c34dab303f49aea3562fc25af75, c0deb027c99c099aa6b831e326bfba802b25e774 to < 99bc25748e394d17f9e8b10cc7f273b8e64c1c7e, 4f7e7236435ca0abe005c674ebd6892c6e83aeb3 to < 43626dade36fa74d3329046f4ae2d7fdefe401c6, 5.4.213 to < 5.4.215, 5.10.143 to < 5.10.145, 5.15.68 to < 5.15.70, 5.19.9 to < 5.19.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/321488cfac7d0eb6d97de467015ff754f85813ff
git.kernel.orghttps://git.kernel.org/stable/c/07191f984842d50020789ff14c75da436a7f46a9
git.kernel.orghttps://git.kernel.org/stable/c/9f267393b036f1470fb12fb892d59e7ff8aeb58d
git.kernel.orghttps://git.kernel.org/stable/c/5db17805b6ba4c34dab303f49aea3562fc25af75
git.kernel.orghttps://git.kernel.org/stable/c/99bc25748e394d17f9e8b10cc7f273b8e64c1c7e
git.kernel.orghttps://git.kernel.org/stable/c/43626dade36fa74d3329046f4ae2d7fdefe401c6

01 Record index

CVE-2022-48671

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2022-48671

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References