CVE-2022-48672

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48672
In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes() Commit 78c44d910d3e ("drivers/of: Fix depth when unflattening devicetree") forgot to fix up the depth check in the loop body in unflatten_dt_nodes() which makes it possible to overflow the nps[] buffer... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e Patch
https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 Patch
https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 Patch
https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 Patch
https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 Patch
https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf Patch
https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 May 2024, 20:26

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: de: fdt: corrige el error uno por uno en unflatten_dt_nodes() Commit 78c44d910d3e ("drivers/of: corrige la profundidad al desacoplar el árbol de dispositivos") olvidó arreglar la comprobación de profundidad el cuerpo del bucle en unflatten_dt_nodes() que permite desbordar el búfer nps[]... Encontrado por el Centro de verificación de Linux (linuxtesting.org) con la herramienta de análisis estático SVACE.
First Time Linux linux Kernel
Linux
CWE CWE-193
References () https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e - () https://git.kernel.org/stable/c/2133f451311671c7c42b5640d2b999326b39aa0e - Patch
References () https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 - () https://git.kernel.org/stable/c/2566706ac6393386a4e7c4ce23fe17f4c98d9aa0 - Patch
References () https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 - () https://git.kernel.org/stable/c/2f945a792f67815abca26fa8a5e863ccf3fa1181 - Patch
References () https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 - () https://git.kernel.org/stable/c/ba6b9f7cc1108bad6e2c53b1d6e0156379188db7 - Patch
References () https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 - () https://git.kernel.org/stable/c/cbdda20ce363356698835185801a58a28f644853 - Patch
References () https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf - () https://git.kernel.org/stable/c/e0e88c25f88b9805572263c9ed20f1d88742feaf - Patch
References () https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c - () https://git.kernel.org/stable/c/ee4369260e77821602102dcc7d792de39a56365c - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

03 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 15:15

Updated : 2024-05-23 20:26

NVD link : CVE-2022-48672

Mitre link : CVE-2022-48672

CVE.ORG link : CVE-2022-48672

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-193

Off-by-one Error