CVE-2022-48672

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48672
In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes() Commit 78c44d910d3e ("drivers/of: Fix depth when unflattening devicetree") forgot to fix up the depth check in the loop body in unflatten_dt_nodes() which makes it possible to overflow the nps[] buffer... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e Patch
https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 Patch
https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 Patch
https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 Patch
https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 Patch
https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf Patch
https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c Patch
https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e Patch
https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 Patch
https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 Patch
https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 Patch
https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 Patch
https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf Patch
https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e - Patch () https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e - Patch
References () https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 - Patch () https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 - Patch
References () https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 - Patch () https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 - Patch
References () https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 - Patch () https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 - Patch
References () https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 - Patch () https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 - Patch
References () https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf - Patch () https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf - Patch
References () https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c - Patch () https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c - Patch

23 May 2024, 20:26

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: de: fdt: corrige el error uno por uno en unflatten_dt_nodes() Commit 78c44d910d3e ("drivers/of: corrige la profundidad al desacoplar el árbol de dispositivos") olvidó arreglar la comprobación de profundidad el cuerpo del bucle en unflatten_dt_nodes() que permite desbordar el búfer nps[]... Encontrado por el Centro de verificación de Linux (linuxtesting.org) con la herramienta de análisis estático SVACE.
CWE CWE-193
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e - () https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e - Patch
References () https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 - () https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 - Patch
References () https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 - () https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 - Patch
References () https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 - () https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 - Patch
References () https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 - () https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 - Patch
References () https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf - () https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf - Patch
References () https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c - () https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

03 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 15:15

Updated : 2024-11-21 07:33

NVD link : CVE-2022-48672

Mitre link : CVE-2022-48672

CVE.ORG link : CVE-2022-48672

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-193

Off-by-one Error


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024