Answer in brief
CVE-2022-48874 records a High severity (CVSS 7.8) vulnerability in misc: fastrpc: Fix use-after-free and race in fastrpc_map_find. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8f6c1d8c4f0cc316b0456788fff8373554d1d99d <a50c5c25b6e7d2824698c0e6385f882a18f4a498 || >=8f6c1d8c4f0cc316b0456788fff8373554d1d99d <9446fa1683a7e3937d9970248ced427c1983a1c5 | a50c5c25b6e7d2824698c0e6385f882a18f4a498, 9446fa1683a7e3937d9970248ced427c1983a1c5 |
| Linux/Linuxgeneric | 5.18 | Not reported |
Published upstream
Aug 21, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find Currently, there is a race window between the point when the mutex is unlocked in fastrpc_map_lookup and the reference count increasing (fastrpc_map_get) in fastrpc_map_find, which can also lead to use-after-free. So lets merge fastrpc_map_find into fastrpc_map_lookup which allows us to both protect the maps list by also taking the &fl->lock spinlock and the reference count, since the spinlock will be released only after. Add take_ref argument to make this suitable for all callers.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2022-48874 records a High severity (CVSS 7.8) vulnerability in misc: fastrpc: Fix use-after-free and race in fastrpc_map_find. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8f6c1d8c4f0cc316b0456788fff8373554d1d99d <a50c5c25b6e7d2824698c0e6385f882a18f4a498 || >=8f6c1d8c4f0cc316b0456788fff8373554d1d99d <9446fa1683a7e3937d9970248ced427c1983a1c5 | a50c5c25b6e7d2824698c0e6385f882a18f4a498, 9446fa1683a7e3937d9970248ced427c1983a1c5 |
| Linux/Linuxgeneric | 5.18 | Not reported |
Published upstream
Aug 21, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find Currently, there is a race window between the point when the mutex is unlocked in fastrpc_map_lookup and the reference count increasing (fastrpc_map_get) in fastrpc_map_find, which can also lead to use-after-free. So lets merge fastrpc_map_find into fastrpc_map_lookup which allows us to both protect the maps list by also taking the &fl->lock spinlock and the reference count, since the spinlock will be released only after. Add take_ref argument to make this suitable for all callers.
Quoted source text, attributed separately from HOL analysis.