CVE-2022-48742
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() W
CVSS
7.8
Alto
EPSS
0.2%
p15
KEV
—
Exploit Today
4
0-100
Publicado: 20 jun 2024 · Última mod.: 4 ago 2026 · CWE-416
0.2%EPSS · 30 días0.2%
2026-07-292026-08-26
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() While looking at one unrelated syzbot bug, I found the replay logic in __rtnl_newlink() to potentially trigger use-after-free. It is better to clear master_dev and m_ops inside the loop, in case we have to replay it.
- git.kernel.orghttps://git.kernel.org/stable/c/2cf180360d66bd657e606c1217e0e668e6faa303
- git.kernel.orghttps://git.kernel.org/stable/c/36a9a0aee881940476b254e0352581401b23f210
- git.kernel.orghttps://git.kernel.org/stable/c/3bbe2019dd12b8d13671ee6cda055d49637b4c39
- git.kernel.orghttps://git.kernel.org/stable/c/7d9211678c0f0624f74cdff36117ab8316697bb8
- git.kernel.orghttps://git.kernel.org/stable/c/a01e60a1ec6bef9be471fb7182a33c6d6f124e93
- git.kernel.orghttps://git.kernel.org/stable/c/bd43771ee9759dd9dfae946bff190e2c5a120de5
- git.kernel.orghttps://git.kernel.org/stable/c/c6f6f2444bdbe0079e41914a35081530d0409963
- git.kernel.orghttps://git.kernel.org/stable/c/def5e7070079b2a214b3b1a2fbec623e6fbfe34a
- git.kernel.orghttps://git.kernel.org/stable/c/2cf180360d66bd657e606c1217e0e668e6faa303
- git.kernel.orghttps://git.kernel.org/stable/c/36a9a0aee881940476b254e0352581401b23f210
- git.kernel.orghttps://git.kernel.org/stable/c/3bbe2019dd12b8d13671ee6cda055d49637b4c39
- git.kernel.orghttps://git.kernel.org/stable/c/7d9211678c0f0624f74cdff36117ab8316697bb8
- git.kernel.orghttps://git.kernel.org/stable/c/a01e60a1ec6bef9be471fb7182a33c6d6f124e93
- git.kernel.orghttps://git.kernel.org/stable/c/bd43771ee9759dd9dfae946bff190e2c5a120de5
- git.kernel.orghttps://git.kernel.org/stable/c/c6f6f2444bdbe0079e41914a35081530d0409963
- git.kernel.orghttps://git.kernel.org/stable/c/def5e7070079b2a214b3b1a2fbec623e6fbfe34a
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-580937.0 ALT3.2%
——1The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session.
An unprivileged local user can exploit this race condition to escalate privileges.16hCVE-2026-580917.8 ALT5.6%
——2The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would block, it releases the sync group list lock and sleeps. Upon reawakening, it is possible that the sync group structure is freed, but the implementation did not handle this possibility.
On a system with a multiple audio devices, an unprivileged local user can exploit this use-after-free to escalate privileges.16hCVE-2026-580907.8 ALT5.6%
——2The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free those messages, leaving freed data mbufs in the receive socket buffer.
An unprivileged local user can exploit this use-after-free to escalate privileges.16hCVE-2026-792909.6 CRÍ25.4%
——8Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)16hCVE-2026-792829.6 CRÍ28.2%
——8Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)16hCVE-2026-792759.6 CRÍ34.2%
——10Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)16h