CVE-2022-48670

A security vulnerability was identified in the Linux kernel's PECI (Platform Environment Control Interface) subsystem, specifically within the CPU driver. The issue arises from a use-after-free condition in the adev_release() function.

Red Hat has evaluated this vulnerability as Moderate severity because it requires local access to trigger an error path during device initialization, primarily leading to a denial-of-service condition via a kernel crash. The Platform Environment Control Interface (PECI) subsystem is not enabled in default enterprise installations such as Red Hat Enterprise Linux 8 and 9. Consequently, typical production environments are not exposed unless running non-default configurations or custom kernels on hardware utilizing PECI telemetry.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.