CVE-2022-49031

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49031
In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403_read_raw KASAN report out-of-bounds read as follows: BUG: KASAN: global-out-of-bounds in afe4403_read_raw+0x42e/0x4c0 Read of size 4 at addr ffffffffc02ac638 by task cat/279 Call Trace: afe4403_read_raw iio_read_channel_info dev_attr_show The buggy address belongs to the variable: afe4403_channel_leds+0x18/0xffffffffffffe9e0 This issue can be reproduced by singe command: $ cat /sys/bus/spi/devices/spi0.0/iio\:device0/in_intensity6_raw The array size of afe4403_channel_leds is less than channels, so access with chan->address cause OOB read in afe4403_read_raw. Fix it by moving access before use it.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06c6ce21cec77dfa860d57e7a006000a57812efb Patch
https://git.kernel.org/stable/c/2d6a437064ffbe685c67ddb16dfc0946074c6c3f Patch
https://git.kernel.org/stable/c/58143c1ed5882c138a3cd2251a336fc8755f23d9 Patch
https://git.kernel.org/stable/c/726fa3e4ab97dcff1c745bdc4fb137366cb8d3df Patch
https://git.kernel.org/stable/c/98afcb5f3be645d330c74c5194ba0d80e26f95e0 Patch
https://git.kernel.org/stable/c/b1756af172fb80a3edc143772d49e166ec691b6c Patch
https://git.kernel.org/stable/c/c9268df36818ee4eaaaeadc80009b442a5ca69c9 Patch
https://git.kernel.org/stable/c/e7e76a77aabef8989cbc0a8417af1aa040620867 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
History

24 Oct 2024, 16:03

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CWE CWE-125
References () https://git.kernel.org/stable/c/06c6ce21cec77dfa860d57e7a006000a57812efb - () https://git.kernel.org/stable/c/06c6ce21cec77dfa860d57e7a006000a57812efb - Patch
References () https://git.kernel.org/stable/c/2d6a437064ffbe685c67ddb16dfc0946074c6c3f - () https://git.kernel.org/stable/c/2d6a437064ffbe685c67ddb16dfc0946074c6c3f - Patch
References () https://git.kernel.org/stable/c/58143c1ed5882c138a3cd2251a336fc8755f23d9 - () https://git.kernel.org/stable/c/58143c1ed5882c138a3cd2251a336fc8755f23d9 - Patch
References () https://git.kernel.org/stable/c/726fa3e4ab97dcff1c745bdc4fb137366cb8d3df - () https://git.kernel.org/stable/c/726fa3e4ab97dcff1c745bdc4fb137366cb8d3df - Patch
References () https://git.kernel.org/stable/c/98afcb5f3be645d330c74c5194ba0d80e26f95e0 - () https://git.kernel.org/stable/c/98afcb5f3be645d330c74c5194ba0d80e26f95e0 - Patch
References () https://git.kernel.org/stable/c/b1756af172fb80a3edc143772d49e166ec691b6c - () https://git.kernel.org/stable/c/b1756af172fb80a3edc143772d49e166ec691b6c - Patch
References () https://git.kernel.org/stable/c/c9268df36818ee4eaaaeadc80009b442a5ca69c9 - () https://git.kernel.org/stable/c/c9268df36818ee4eaaaeadc80009b442a5ca69c9 - Patch
References () https://git.kernel.org/stable/c/e7e76a77aabef8989cbc0a8417af1aa040620867 - () https://git.kernel.org/stable/c/e7e76a77aabef8989cbc0a8417af1aa040620867 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iio: health: afe4403: Se corrige la lectura oob en el informe de KASAN afe4403_read_raw que indica que la lectura está fuera de los límites de la siguiente manera: ERROR: KASAN: global-out-of-bounds en afe4403_read_raw+0x42e/0x4c0 Lectura de tamaño 4 en la dirección ffffffffc02ac638 por la tarea cat/279 Seguimiento de llamadas: afe4403_read_raw iio_read_channel_info dev_attr_show La dirección con errores pertenece a la variable: afe4403_channel_leds+0x18/0xffffffffffffe9e0 Este problema se puede reproducir con un solo comando: $ cat /sys/bus/spi/devices/spi0.0/iio\:device0/in_intensity6_raw El tamaño de la matriz de afe4403_channel_leds es menor que channels, por lo que el acceso con chan->address provoca una lectura OOB en afe4403_read_raw. Solucione el problema moviendo el acceso antes de usarlo.

21 Oct 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 20:15

Updated : 2024-10-24 16:03

NVD link : CVE-2022-49031

Mitre link : CVE-2022-49031

CVE.ORG link : CVE-2022-49031

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024