[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-49501":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":24,"references":26,"score":31,"epss_score":32,"epss_percentile":33,"is_kev":19,"cisa_kev_date_added":34,"cisa_kev_due_date":34,"cisa_ssvc":35,"attack_mappings":45,"exploits":52},321264,"CVE-2022-49501","EUVD-2022-54728","In the Linux kernel, the following vulnerability has been resolved:\n\nusbnet: Run unregister_netdev() before unbind() again\n\nCommit 2c9d6c2b871d (\"usbnet: run unbind() before unregister_netdev()\")\nsought to fix a use-after-free on disconnect of USB Ethernet adapters.\n\nIt turns out that a different fix is necessary to address the issue:\nhttps:\u002F\u002Flore.kernel.org\u002Fnetdev\u002F18b3541e5372bc9b9fc733d422f4e698c089077c.1650177997.git.lukas@wunner.de\u002F\n\nSo the commit was not necessary.\n\nThe commit made binding and unbinding of USB Ethernet asymmetrical:\nBefore, usbnet_probe() first invoked the ->bind() callback and then\nregister_netdev().  usbnet_disconnect() mirrored that by first invoking\nunregister_netdev() and then ->unbind().\n\nSince the commit, the order in usbnet_disconnect() is reversed and no\nlonger mirrors usbnet_probe().\n\nOne consequence is that a PHY disconnected (and stopped) in ->unbind()\nis afterwards stopped once more by unregister_netdev() as it closes the\nnetdev before unregistering.  That necessitates a contortion in ->stop()\nbecause the PHY may only be stopped if it hasn't already been\ndisconnected.\n\nReverting the commit allows making the call to phy_stop() unconditional\nin ->stop().","2025-02-26T07:01:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21],"CWE-416",[23],"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",[25],"Linux Linux Kernel",[27,28,29,30],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F6d5deb242874d924beccf7eb3cef04c1c3b0da79","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F969a1b3ea3cb7d58a16fe12fd1b04bfc0ea40509","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fd1408f6b4dd78fb1b9e26bcf64477984e5f85409","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Ffbda837107f9bd4ec658d2aa88c6856dba606f06",0.39,0.00267,0.1793,null,{"timestamp":36,"automatable":37,"tech_impact":38,"exploitation":39,"cisa_decision":40,"cisa_remediation_timeline":44},"2025-02-27T18:15:41.764586Z","no","total","none",{"vector":41,"decision":42,"priority":43},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T13:37:06.857137\u002F","track_star","medium","14D",[46],{"name":47,"source":48,"tactics":49,"technique_id":51},"Exploitation for Privilege Escalation","attack_vector",[50],"privilege-escalation","T1068",[]]