CVE-2022-48875

17

FAUCET Score

CVE-2022-48875 is a NULL pointer dereference vulnerability in the Linux kernel's mac80211 Wi-Fi subsystem, specifically affecting the handling of AMPDU sessions. This flaw occurs when a deauthentication process is ongoing, potentially leading to a system crash (denial of service). Rated as Medium severity (CVSS 5.5), it requires local access and low privileges to exploit, with the primary impact being system unavailability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 5.10.165CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.11, < 5.15.90CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.16, < 6.1.8CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.24%

Probability of exploitation in next 30 days

EPSS Percentile

15.8%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0024 is in the 68th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (48)

ansiblepatch availablevia llm_extracted

difypatch availablevia llm_extracted

freshrsspatch availablevia llm_extracted

ubuntupatch availablevia ubuntu_usn

Product: linux (xenial)Fixed in: 4.4.0-278.312

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (xenial)Fixed in: 4.4.0-1190.205

ubuntupatch availablevia ubuntu_usn

Product: linux-kvm (xenial)Fixed in: 4.4.0-1153.164

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (xenial)Fixed in: 4.15.0-1197.212~16.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (trusty)Fixed in: 4.4.0-1152.158

ubuntupatch availablevia ubuntu_usn

Product: linux-lts-xenial (trusty)Fixed in: 4.4.0-278.312~14.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (xenial)Fixed in: 4.4.0-1122.129

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fips (focal)Fixed in: 5.4.0-1160.166+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (focal)Fixed in: 5.4.0-1160.166

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm-5.4 (bionic)Fixed in: 5.4.0-1102.107~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-bluefield (focal)Fixed in: 5.4.0-1116.123

ubuntupatch availablevia ubuntu_usn

Product: linux (focal)Fixed in: 5.4.0-227.247

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (focal)Fixed in: 5.4.0-1159.168

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-5.4 (bionic)Fixed in: 5.4.0-1156.166~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-5.4 (bionic)Fixed in: 5.4.0-1159.168~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle-5.4 (bionic)Fixed in: 5.4.0-1154.164~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (focal)Fixed in: 5.4.0-1156.166

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (focal)Fixed in: 5.4.0-1154.164

ubuntupatch availablevia ubuntu_usn

Product: linux-xilinx-zynqmp (focal)Fixed in: 5.4.0-1074.78

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-fips (focal)Fixed in: 5.4.0-1155.165+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-fips (bionic)Fixed in: 4.15.0-2127.133

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (bionic)Fixed in: 4.15.0-1144.156

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (bionic)Fixed in: 4.15.0-2090.96

ubuntupatch availablevia ubuntu_usn

Product: linux (bionic)Fixed in: 4.15.0-247.259

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (bionic)Fixed in: 4.15.0-1189.202

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-4.15 (bionic)Fixed in: 4.15.0-1182.199

ubuntupatch availablevia ubuntu_usn

Product: linux-kvm (bionic)Fixed in: 4.15.0-1171.176

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (bionic)Fixed in: 4.15.0-1151.162

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-hwe (xenial)Fixed in: 4.15.0-1189.202~16.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (xenial)Fixed in: 4.15.0-1182.199~16.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-hwe (xenial)Fixed in: 4.15.0-247.259~16.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (xenial)Fixed in: 4.15.0-1151.162~16.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-hwe-5.4 (bionic)Fixed in: 5.4.0-227.247~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm (focal)Fixed in: 5.4.0-1102.107

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (focal)Fixed in: 5.4.0-1130.140

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (focal)Fixed in: 5.4.0-1159.168+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-iot (focal)Fixed in: 5.4.0-1060.63

ubuntupatch availablevia ubuntu_usn

Product: linux-kvm (focal)Fixed in: 5.4.0-1143.152

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (trusty)Fixed in: 4.15.0-1197.212~14.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fips (bionic)Fixed in: 4.15.0-2106.112

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-4.15 (bionic)Fixed in: 4.15.0-1197.212

redhatno patchvia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt

Vendor Advisories (25)

ubuntuUSN-8224-1

Linux kernel (BlueField) vulnerabilities

ubuntuUSN-8098-9

Linux kernel (IBM) vulnerabilities

freshrssllm-freshrss-ed817927bc98fb16

USN-8098-9: Linux kernel (IBM) vulnerabilities

ansiblellm-ansible-115cb54064e3b55c

USN-8098-9: Linux kernel (IBM) vulnerabilities

ubuntuUSN-8098-8

Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8098-7

Linux kernel (Azure) vulnerabilities

ansiblellm-ansible-36ecb36a32faee7a

USN-8098-7: Linux kernel (Azure) vulnerabilities

freshrssllm-freshrss-51fb413e4b11cdf0

USN-8098-7: Linux kernel (Azure) vulnerabilities

ubuntuUSN-8098-6

Linux kernel (FIPS) vulnerabilities

ubuntuUSN-8098-5

Linux kernel vulnerabilities

ubuntuUSN-8112-5

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8112-4

Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8112-3

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8098-4

Linux kernel vulnerabilities

difyllm-dify-42060f3cf406d8d4

USN-8112-3: Linux kernel (Azure) vulnerabilities

ubuntuUSN-8112-2

Linux kernel (FIPS) vulnerabilities

ubuntuUSN-8112-1

Linux kernel vulnerabilities

ubuntuUSN-8107-1

Linux kernel (AWS FIPS) vulnerabilities

ubuntuUSN-8098-3

Linux kernel vulnerabilities

ubuntuUSN-8098-2

Linux kernel (GCP) vulnerabilities

ubuntuUSN-8098-1

Linux kernel vulnerabilities

ubuntuUSN-8070-3

Linux kernel (FIPS) vulnerabilities

ubuntuUSN-8070-2

Linux kernel vulnerabilities

ubuntuUSN-8070-1

Linux kernel vulnerabilities

redhatCVE-2022-48875Moderate

kernel: wifi: mac80211: sdata can be NULL during AMPDU start

References

git.kernel.org / stable/c/187523fa7c2d4c780f775cb869216865c4a909ef

Patch

git.kernel.org / stable/c/69403bad97aa0162e3d7911b27e25abe774093df

Patch

git.kernel.org / stable/c/a12fd43bd175fa52c82f9740179d38c34ca1b62e

Patch

git.kernel.org / stable/c/c838df8461a601b20dc1b9fb1834d2aad8e2f949

Patch