In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: make sure to refresh masterdev/mops in _rtnlnewlink()
While looking at one unrelated syzbot bug, I found the replay logic in _rtnlnewlink() to potentially trigger use-after-free.
It is better to clear masterdev and mops inside the loop, in case we have to replay it.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48742.json",
"cna_assigner": "Linux"
}