CVE-2022-48638

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48638
In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1e9571887f97b17cf3ffe9aa4da89090ea60988b Patch
https://git.kernel.org/stable/c/8484a356cee8ce3d6a8e6266ff99be326e9273ad Patch
https://git.kernel.org/stable/c/df02452f3df069a59bc9e69c84435bf115cb6e37 Patch
https://git.kernel.org/stable/c/1e9571887f97b17cf3ffe9aa4da89090ea60988b Patch
https://git.kernel.org/stable/c/8484a356cee8ce3d6a8e6266ff99be326e9273ad Patch
https://git.kernel.org/stable/c/df02452f3df069a59bc9e69c84435bf115cb6e37 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
History

21 Mar 2025, 18:13

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/1e9571887f97b17cf3ffe9aa4da89090ea60988b - () https://git.kernel.org/stable/c/1e9571887f97b17cf3ffe9aa4da89090ea60988b - Patch
References () https://git.kernel.org/stable/c/8484a356cee8ce3d6a8e6266ff99be326e9273ad - () https://git.kernel.org/stable/c/8484a356cee8ce3d6a8e6266ff99be326e9273ad - Patch
References () https://git.kernel.org/stable/c/df02452f3df069a59bc9e69c84435bf115cb6e37 - () https://git.kernel.org/stable/c/df02452f3df069a59bc9e69c84435bf115cb6e37 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*

21 Nov 2024, 07:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1e9571887f97b17cf3ffe9aa4da89090ea60988b - () https://git.kernel.org/stable/c/1e9571887f97b17cf3ffe9aa4da89090ea60988b -
References () https://git.kernel.org/stable/c/8484a356cee8ce3d6a8e6266ff99be326e9273ad - () https://git.kernel.org/stable/c/8484a356cee8ce3d6a8e6266ff99be326e9273ad -
References () https://git.kernel.org/stable/c/df02452f3df069a59bc9e69c84435bf115cb6e37 - () https://git.kernel.org/stable/c/df02452f3df069a59bc9e69c84435bf115cb6e37 -

30 Oct 2024, 16:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: cgroup: cgroup_get_from_id() debe verificar que el kn buscado sea un directorio. cgroup tiene que ser un directorio kernfs; de lo contrario, se produce un pánico en el kernel, especialmente la identificación de cgroup se proporciona desde el espacio de usuario.

28 Apr 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-28 13:15

Updated : 2025-03-21 18:13

NVD link : CVE-2022-48638

Mitre link : CVE-2022-48638

CVE.ORG link : CVE-2022-48638

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo