Security readout for executives and security teams
Plain-English summary
This Linux kernel issue is a memory leak in the WWAN iosm networking driver during initialization failure. The public sources describe resource cleanup being missed, not code execution or privilege escalation. Business impact is most likely stability risk on affected kernels that use this driver.
Executive priority
Treat as routine patch management unless affected systems rely on WWAN iosm in stability-sensitive environments. There is no cited active exploitation, no CVSS score, and no public source evidence of confidentiality or integrity impact.
Technical view
In ipc_mux_init(), if allocation of ipc_mux->ul_adb.pp_qlt fails, the previously allocated ipc_mux object is not released. The kernel stable references indicate the issue was fixed by adding the missing cleanup path. No CVSS, CWE, or exploit details are provided.
Likely exposure
Exposure appears limited to Linux systems running affected kernel versions and using or loading the net wwan iosm driver. The bundle lists Linux 5.18, 6.0.13, and 6.1 as affected, with other status details incomplete.
Exploitation context
CISA KEV status is false, and the provided sources do not cite active exploitation or public exploit activity. The described trigger is an allocation failure during driver initialization, so evidence supports availability/resource-leak concern rather than direct compromise.
Researcher notes
The record is sparse. Validate against kernel stable commits e21478d0054f63eec7ce833296cf9788764a0ec7 and 23353efc26e98b61b925274ecbb8f0610f69a8aa. Avoid overstating risk: the provided description only supports a memory leak on an allocation-failure path.
Mitigation direction
- Check vendor kernel advisories for CVE-2022-48963 coverage.
- Update affected Linux kernels to builds containing the referenced stable fixes.
- Prioritize hosts that use WWAN iosm functionality or load the driver.
- Monitor affected systems for memory pressure during driver initialization failures.
Validation and detection
- Inventory kernel versions across Linux systems.
- Confirm whether the WWAN iosm driver is present or loaded.
- Compare deployed kernels against vendor packages containing the stable fixes.
- Review kernel package changelogs for CVE-2022-48963 or the referenced commits.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-48963 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/e21478d0054f63eec7ce833296cf9788764a0ec7CVE reference, Linux
- https://git.kernel.org/stable/c/23353efc26e98b61b925274ecbb8f0610f69a8aaCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.