- 5.5MediumCVSS base score
- 0.24%Exploitation in 30 daysEPSS · top 85% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have been disabled, the runtime services workqueue will never have been allocated. Do not try to destroy the workqueue unconditionally in the unlikely event that EFI initialisation fails to avoid dereferencing a NULL pointer.
Timeline
ID reserved
By Linux
- 36 days later
· 36 days later
Published
- 21 months later
· 21 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (11 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 2ff3c97b47521d6700cc6485c7935908dcd2c27c – < 585a0b2b3ae7903c6abee3087d09c69e955a7794
- affected 5167f194da6947e19a3e970485ee3ccb44f7958d – < 5fcf75a8a4c3e7ee9122d143684083c9faf20452
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < 4ca71bc0e1995d15486cd7b60845602a28399cb5
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < e2ea55564229e4bea1474af15b111b3a3043b76f
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < adc96d30f6503d30dc68670c013716f1d9fcc747
- affected 98086df8b70c06234a8f4290c46064e44dafa0ed – < 703c13fe3c9af557d312f5895ed6a5fda2711104
- affected f591a42b8f9a9d20e01d0462f4f55d2176ac52ec
- affected e6584124b9823151ef586d10dedf565ade50cea6
- affected 4.19.142 – < 4.19.270
- affected 5.4.61 – < 5.4.229
- affected 5.7.18 – < 5.8
- affected 5.8.4 – < 5.9
- affected 5.9
- unaffected < 5.9
- unaffected 4.19.270 – ≤ 4.19.*
- unaffected 5.4.229 – ≤ 5.4.*
- unaffected 5.10.164 – ≤ 5.10.*
- unaffected 5.15.89 – ≤ 5.15.*
- unaffected 6.1.7 – ≤ 6.1.*
- unaffected 6.2 – ≤ *
References
References6
- https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794 (opens in a new tab)
- https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452 (opens in a new tab)
- https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5 (opens in a new tab)
- https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f (opens in a new tab)
- https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747 (opens in a new tab)
- https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2022-53758 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2022-48879)Record last updated .