LiveActive security incident?Get immediate response
CVE Record

CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings()

In the Linux kernel, the following vulnerability has been resolved: ethernet: aeroflex: fix potential skb leak in greth_init_rings() The greth_init_rings() function won't free the newly allocated skb when dma_mapping_error() returns error, so add dev_kfree_skb() to fix it. Compile tested only.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

This CVE is a Linux kernel defect in the Aeroflex GRETH Ethernet driver. If a DMA mapping operation fails during ring initialization, a newly allocated network buffer may not be freed. The cited sources do not provide CVSS, confirmed exploitation, or business-impact evidence beyond a potential resource leak.

Executive priority

Treat this as a targeted kernel maintenance item, not an emergency, unless your environment uses GRETH Ethernet hardware. No source cites exploitation or severe impact, but affected operational systems should receive normal vendor-backed kernel updates.

Technical view

greth_init_rings() can leak an skb when dma_mapping_error() occurs because the error path failed to call dev_kfree_skb(). Stable Linux commits add the missing free. The fix was described as compile-tested only, so downstream validation matters for kernels using this driver.

Likely exposure

Exposure is likely limited to Linux systems running affected kernel versions with the Aeroflex GRETH Ethernet driver present or enabled. General Linux servers without this driver or hardware path are less likely to be exposed, but source evidence does not provide a definitive deployment profile.

Exploitation context

The source bundle does not indicate active exploitation, public exploit availability, or KEV listing. The issue appears to be an error-path resource leak, not a documented remote code execution or privilege escalation path.

Researcher notes

Evidence is narrow: CVE text identifies a missing skb free on dma_mapping_error() in greth_init_rings(), with stable commits as remediation references. No CWE, CVSS, exploit details, or runtime trigger conditions are provided in the bundle.

Mitigation direction

  • Upgrade to a Linux kernel containing the referenced stable GRETH fixes.
  • For vendor kernels, request CVE-2022-48958 backport or advisory status.
  • Reduce exposure by disabling unused GRETH driver support where operationally safe.
  • Prioritize normal kernel maintenance unless local asset evidence shows GRETH usage.

Validation and detection

  • Inventory kernel versions against the affected versions and stable fix references.
  • Check whether the Aeroflex GRETH driver is built, loaded, or required.
  • Confirm vendor kernel changelogs include a CVE-2022-48958 backport.
  • Regression-test network initialization on systems that use GRETH hardware.
Prepared
Confidence
medium
Sources
10

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2022-48958 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
1ADP providers
9Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CISA-ADPCISA ADP Vulnrichment
other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinuxd4c41139df6e74c6fff0cbac43e51cab782133be, d4c41139df6e74c6fff0cbac43e51cab782133be, d4c41139df6e74c6fff0cbac43e51cab782133be, d4c41139df6e74c6fff0cbac43e51cab782133be, d4c41139df6e74c6fff0cbac43e51cab782133be, d4c41139df6e74c6fff0cbac43e51cab782133be, d4c41139df6e74c6fff0cbac43e51cab782133be, d4c41139df6e74c6fff0cbac43e51cab782133beunaffected
LinuxLinux2.6.34, 0, 4.9.336, 4.14.302, 4.19.269, 5.4.227, 5.10.159, 5.15.83, 6.0.13, 6.1affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.