CVE-2022-48789
A critical vulnerability in the Linux kernel’s NVMe over TCP implementation could allow an attacker to trigger a use‑after‑free, potentially leading to arbitrary code execution. The flaw occurs during error recovery when asynchronous events are not properly flushed before the admin queue is destroyed. The issue has been fixed in a recent kernel update.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
All Linux kernel users that run a kernel version before the fix, especially those using NVMe over TCP. Typical users include servers and embedded devices that rely on NVMe storage.
Real-world impact
An attacker could exploit the use‑after‑free to execute arbitrary code with kernel privileges, potentially taking full control of the affected system.
Why this severity
The CVSS score of 9.8 reflects the lack of authentication or user interaction required, the high impact on confidentiality, integrity, and availability, and the low complexity of exploitation.
What to do about it
- 01Update the Linux kernel to the latest version that includes the nvme-tcp fix.
- 02Reboot the system to load the updated kernel.
NVD description
Timeline
- Jul 16, 2024 · Jul 16, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.