widely-deployed-product-advisoryendpoint-software-vulnerabilityprivilege-escalation-method

Red Hat RHEL 8.6 Kernel Fixes mpt3sas Use-After-Free Denial of Service

Patch & Detection Intelligence · 4 sources · Updated 3mo ago · First seen May 16, 2023

Red Hat released Moderate-severity advisory RHSA-2024:9500 for Red Hat Enterprise Linux 8.6, updating the kernel to 4.18.0-372.129.1.el8_6. The update remediates three use-after-free flaws: CVE-2022-48695 in the mpt3sas SCSI driver, CVE-2024-26656 in the AMDGPU DRM driver, and CVE-2024-46858 in MPTCP path-manager timer handling.

CVE-2022-48695 arises from incorrect refcount_t handling during mpt3sas controller resets and can allow a low-privileged local attacker to cause a denial of service without user interaction. Affected RHEL 8.6 Extended Life Cycle Long Life, AUS, TUS, and SAP Solutions offerings should install the applicable kernel package and reboot to activate the fixes; Red Hat rates the issue 5.5 CVSS v3.1 based on availability impact, while NVD and cve.org assign 7.8 scores.

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

4 events · May 9, 2023 – May 16, 2023

Reported May 3, 20243y ago
Linux kernel CVE team documents upstream fixes for CVE-2022-48695
The Linux kernel CVE team documented CVE-2022-48695 as a use-after-free issue in the mpt3sas SCSI driver during controller reset, affecting drivers/scsi/mpt3sas/mpt3sas_scsih.c. It identified fixes in stable kernel releases from 4.9.328 through 6.0 and recommended updating to a current stable release rather than cherry-picking individual commits.
CVE-2022-48695: scsi: mpt3sas: Fix use-after-free warning
Reported May 16, 20233y ago
Red Hat issues RHEL 8.6 extended-support kernel fix
Red Hat published Moderate-severity advisory RHSA-2024:9500, providing kernel version 4.18.0-372.129.1.el8_6 for supported RHEL 8.6 extended-support offerings. The update fixes CVE-2022-48695 along with CVE-2024-26656 and CVE-2024-46858; affected systems require a reboot after installation.
CVE-2022-48695 - Red Hat Customer Portal
May 16, 20233y ago
Red Hat releases RHEL 8 fixes for CVE-2022-48695
Red Hat released RHSA-2023:2951 for the RHEL 8 kernel and RHSA-2023:2736 for the RHEL 8 kernel-rt package to remediate CVE-2022-48695.
CVE-2022-48695 - Red Hat Customer Portal
May 9, 20234y ago
Red Hat releases RHEL 9 fixes for CVE-2022-48695
Red Hat released RHSA-2023:2458 for the RHEL 9 kernel and RHSA-2023:2148 for the RHEL 9 kernel-rt package, fixing the mpt3sas use-after-free vulnerability CVE-2022-48695.
CVE-2022-48695 - Red Hat Customer Portal

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

3 linked

Use-after-free in Linux kernel AMDGPU DRM user-pointer handling (CVE-2024-26656)Use-after-free in Linux kernel MPTCP path-manager timer deletion (CVE-2024-46858)Use-After-Free in Linux Kernel mpt3sas Controller Reset (CVE-2022-48695)

Affected products

2 linked

Linux KernelRed Hat Enterprise Linux

Organizations

1 linked

Red Hat

Do you run this?See real exploitation activity behind this advisory so you can triage it against everything else in the queue.

Prioritize This Patch

Source coverage

Sources

4 references tracked. Mallory keeps watching after this page renders.

Redhat AccessNews · Jan 1, 2026

RHSA-2024:9500 - Security Advisory - Red Hat Customer PortalOpen source ↗

Bugzilla RedhatNews · Nov 13, 2024

2278999 - (CVE-2022-48695) CVE-2022-48695 kernel: scsi: mpt3sas: Fix use-after-free warningOpen source ↗

Lore KernelNews · May 3, 2024

CVE-2022-48695: scsi: mpt3sas: Fix use-after-free warningOpen source ↗

Redhat OtherNews · May 16, 2023

CVE-2022-48695 - Red Hat Customer PortalOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Red Hat RHEL 8.6 Kernel Fixes mpt3sas Use-After-Free Denial of Service

How this story unfolded

Linux kernel CVE team documents upstream fixes for CVE-2022-48695

Red Hat issues RHEL 8.6 extended-support kernel fix

Red Hat releases RHEL 8 fixes for CVE-2022-48695

Red Hat releases RHEL 9 fixes for CVE-2022-48695

Related entities

Vulnerabilities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Red Hat Patches Linux Kernel Use-After-Free and Device-Driver Flaws

Red Hat RHEL 8 Kernel Updates Fix Use-After-Free and Remote TIPC DoS Flaws

Red Hat Kernel Updates Remediate RCE, Use-After-Free and Network Flaws

Red Hat RHEL 8.6 Kernel Fixes mpt3sas Use-After-Free Denial of Service

How this story unfolded

Linux kernel CVE team documents upstream fixes for CVE-2022-48695

Red Hat issues RHEL 8.6 extended-support kernel fix

Red Hat releases RHEL 8 fixes for CVE-2022-48695

Red Hat releases RHEL 9 fixes for CVE-2022-48695

Related entities

Vulnerabilities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Red Hat Patches Linux Kernel Use-After-Free and Device-Driver Flaws

Red Hat RHEL 8 Kernel Updates Fix Use-After-Free and Remote TIPC DoS Flaws

Red Hat Kernel Updates Remediate RCE, Use-After-Free and Network Flaws