CVE-2022-48673

A flaw was found in the Linux kernel's Shared Memory Communications (SMC) subsystem. A local user can cause a denial of service (DoS) by initiating a link teardown while network requests are actively being processed. Because the kernel releases communication resources before pending receive operations are fully flushed, a use-after-free condition occurs that results in a system crash.

This vulnerability is rated as Low severity because triggering the flaw requires local user access and depends on active Shared Memory Communications (SMC) network traffic across specialized RDMA or ISM devices, with the impact confined to a system crash (denial of service). Standard Red Hat Enterprise Linux deployments do not typically load or utilize the SMC protocol unless explicitly configured for high-performance RDMA environments. An unprivileged attacker cannot exploit this vulnerability remotely or compromise data confidentiality and integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.