What’s Vulnerable › Vulnerabilities

CVE-2022-48798: s390/cio: verify the driver availability for path_event call

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-16 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: s390/cio: verify the driver availability for path_event call If no driver is attached to a device or the driver does not provide the path_event function, an FCES path-event on this device could end up in a kernel-panic. Verify the driver availability before the path_event function call.

Affected products

• Linux kernel: from 5.11 before 5.15.24; from 5.16 before 5.16.10; 5.17-rc1, 5.17-rc2, 5.17-rc3 — fixed in 5.15.24, 5.16.10

How to fix

Upgrade to a fixed version: Linux kernel 5.15.24, 5.16.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/a0619027f11590b2070624297530c34dc7f91bcd
• https://git.kernel.org/stable/c/dd9cb842fa9d90653a9b48aba52f89c069f3bc50
• https://git.kernel.org/stable/c/fe990b7bf6ac93f1d850d076b8f0e758268aa4ab
• https://git.kernel.org/stable/c/a0619027f11590b2070624297530c34dc7f91bcd
• https://git.kernel.org/stable/c/dd9cb842fa9d90653a9b48aba52f89c069f3bc50
• https://git.kernel.org/stable/c/fe990b7bf6ac93f1d850d076b8f0e758268aa4ab

Get alerted when CVE-2022-48798 or the next vulnerability affects your stack