CVE-2022-48357 Race condition in EMUI

High 7.5 Published 27 Mar 2023 Updated 19 Feb 2025

A double fetch race condition in Huawei EMUI and HarmonyOS kernels allows attackers to cause a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-48357?

CVE-2022-48357 is a high-severity vulnerability in Huawei Emui, published on 27 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel.

Weakness: CWE-770

Which versions are affected by CVE-2022-48357?

It affects 2 products.

Products include Huawei Emui, Huawei Harmonyos.

How do I fix CVE-2022-48357?

No fix has been published for CVE-2022-48357 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-48357 being exploited?

There is no known exploitation of CVE-2022-48357 in the wild and no public exploit code.

All Huawei Emui vulnerabilities

Sources

Also known as GHSA-998w-8vh9-h5jv.