CVE-2022-48865: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48865 is a vulnerability in the Linux kernel's TIPC (Transparent Inter-Process Communication) module that can lead to a kernel panic when enabling a bearer. The vulnerability was discovered in 2022 and affects the TIPC bearer initialization process (Kernel Commit).

The vulnerability occurs due to a race condition between two threads during bearer initialization. In thread 1, the monitoring data is allocated after enabling the bearer, while thread 2 attempts to dereference the monitoring pointer before allocation is complete. This leads to a NULL pointer dereference in the tipc_mon_prep() function when accessing mon->dom_gen (Kernel Commit).

When exploited, this vulnerability causes a kernel panic, resulting in a system crash and denial of service condition. The issue affects systems using the TIPC module for inter-process communication (Kernel Commit).

The vulnerability can be triggered during normal operation when enabling a TIPC bearer, specifically when activate messages are received in a separate thread before monitoring data initialization is complete (Kernel Commit).

The issue has been fixed by modifying the bearer initialization sequence to ensure monitoring data is allocated before enabling the bearer to receive messages. The fix was implemented in commit be4977b847f5 and backported to various stable kernel versions (Kernel Commit).