CVE-2022-48879

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48879
In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have been disabled, the runtime services workqueue will never have been allocated. Do not try to destroy the workqueue unconditionally in the unlikely event that EFI initialisation fails to avoid dereferencing a NULL pointer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5 Patch
https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794 Patch
https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452 Patch
https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104 Patch
https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747 Patch
https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

29 Aug 2024, 02:39

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: efi: corrige NULL-deref en la ruta de error de inicio En los casos en los que los servicios de ejecución no son compatibles o se han deshabilitado, la cola de trabajo de los servicios de ejecución nunca se habrá asignado. No intente destruir la cola de trabajo incondicionalmente en el improbable caso de que la inicialización de EFI no pueda evitar la desreferenciación de un puntero NULL.
References () https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5 - () https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5 - Patch
References () https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794 - () https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794 - Patch
References () https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452 - () https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452 - Patch
References () https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104 - () https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104 - Patch
References () https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747 - () https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747 - Patch
References () https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f - () https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f - Patch

21 Aug 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-21 07:15

Updated : 2024-08-29 02:39

NVD link : CVE-2022-48879

Mitre link : CVE-2022-48879

CVE.ORG link : CVE-2022-48879

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference