[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-48977":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":33,"references":35,"score":41,"epss_score":42,"epss_percentile":43,"is_kev":20,"cisa_kev_date_added":44,"cisa_kev_due_date":44,"cisa_ssvc":45,"attack_mappings":55,"exploits":62},308818,"CVE-2022-48977","EUVD-2022-53856","In the Linux kernel, the following vulnerability has been resolved:\n\ncan: af_can: fix NULL pointer dereference in can_rcv_filter\n\nAnalogue to commit 8aa59e355949 (\"can: af_can: fix NULL pointer\ndereference in can_rx_register()\") we need to check for a missing\ninitialization of ml_priv in the receive path of CAN frames.\n\nSince commit 4e096a18867a (\"net: introduce CAN specific pointer in the\nstruct net_device\") the check for dev->type to be ARPHRD_CAN is not\nsufficient anymore since bonding or tun netdevices claim to be CAN\ndevices but do not initialize ml_priv accordingly.","2024-10-21T20:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",5.5,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",false,[22],"CWE-476",[24,25,26,27,28,29,30,31,32],"cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*",[34],"Linux Linux Kernel",[36,37,38,39,40],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F0acc442309a0a1b01bcdaa135e56e6398a49439c","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F3982652957e8d79ac32efcb725450580650a8644","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fc142cba37de29f740a3852f01f59876af8ae462a","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fc42221efb1159d6a3c89e96685ee38acdce86b6f","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Ffcc63f2f7ee3038d53216edd0d8291e57c752557",0.28,0.00245,0.14958,null,{"timestamp":46,"automatable":47,"tech_impact":48,"exploitation":49,"cisa_decision":50,"cisa_remediation_timeline":54},"2024-10-22T13:18:20.904853Z","no","partial","none",{"vector":51,"decision":52,"priority":53},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T09:06:48.148207\u002F","track_star","medium","60D",[56],{"name":57,"source":58,"tactics":59,"technique_id":61},"Exploitation for Privilege Escalation","attack_vector",[60],"privilege-escalation","T1068",[]]