CVE-2022-48783

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: lantiq_gswip: fix use after free in gswip_remove()

of_node_put(priv->ds->slave_mii_bus->dev.of_node) should be done before mdiobus_free(priv->ds->slave_mii_bus).

This vulnerability is rated as Moderate severity because exploitation requires local access to specialized network switch hardware and elevated privileges to trigger device unbinding. The flaw involves an improper deallocation sequence when removing the Lantiq switch device, which can lead to a use-after-free condition. Because the affected driver supports specialized SoC network switch hardware that is not commonly used in enterprise environments, standard Red Hat Enterprise Linux systems are not exposed under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.