01 Record

CVE-2022-48853

Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.26% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 18.2% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-07-16 12:25Z2 YR AGO

Last updated

2026-05-11 18:48Z5 MO AGO

Reserved

2024-07-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant

Data version

5.2

Document digest

6d66dfaf3a1acd74c6a981372fc105f5a747bc9d5e1a5d561e41e2357e0ee349

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < fd97de9c7b973f46a6103f4170c5efc7b8ef8797, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < aaf166f37eb6bb55d81c3e40a2a460c8875c8813, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 06cb238b0f7ac1669cb06390704c61794724c191, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b2f140a9f980806f572d672e1780acea66b9a25c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f3f2247ac31cb71d1f05f56536df5946c6652f4a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7007c894631cf43041dcfa0da7142bbaa7eb673c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < dcead36b19d999d687cd9c99b7f37520d9102b57, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f2141881b530738777c28bb51c62175895c8178b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 901c7280ca0d5e2b4a8929fbe0bfb007ac2a6544, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/fd97de9c7b973f46a6103f4170c5efc7b8ef8797
git.kernel.orghttps://git.kernel.org/stable/c/aaf166f37eb6bb55d81c3e40a2a460c8875c8813
git.kernel.orghttps://git.kernel.org/stable/c/06cb238b0f7ac1669cb06390704c61794724c191
git.kernel.orghttps://git.kernel.org/stable/c/b2f140a9f980806f572d672e1780acea66b9a25c
git.kernel.orghttps://git.kernel.org/stable/c/f3f2247ac31cb71d1f05f56536df5946c6652f4a
git.kernel.orghttps://git.kernel.org/stable/c/7007c894631cf43041dcfa0da7142bbaa7eb673c
git.kernel.orghttps://git.kernel.org/stable/c/dcead36b19d999d687cd9c99b7f37520d9102b57
git.kernel.orghttps://git.kernel.org/stable/c/f2141881b530738777c28bb51c62175895c8178b
git.kernel.orghttps://git.kernel.org/stable/c/901c7280ca0d5e2b4a8929fbe0bfb007ac2a6544
git.kernel.orghttps://git.kernel.org/stable/c/c132f2ba716b5ee6b35f82226a6e5417d013d753
git.kernel.orghttps://git.kernel.org/stable/c/971e5dadffd02beba1063e7dd9c3a82de17cf534
git.kernel.orghttps://git.kernel.org/stable/c/8d9ac1b6665c73f23e963775f85d99679fd8e192
git.kernel.orghttps://git.kernel.org/stable/c/6bfc5377a210dbda2a237f16d94d1bd4f1335026
git.kernel.orghttps://git.kernel.org/stable/c/d4d975e7921079f877f828099bb8260af335508f
git.kernel.orghttps://git.kernel.org/stable/c/7403f4118ab94be837ab9d770507537a8057bc63
git.kernel.orghttps://git.kernel.org/stable/c/270475d6d2410ec66e971bf181afe1958dad565e
git.kernel.orghttps://git.kernel.org/stable/c/ddbd89deb7d32b1fbb879f48d68fda1a8ac58e8e

07 Fixed in

Debian 12

linux
Fixed in 5.16.18-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 5.16.18-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 5.16.18-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.