CVE-2022-48967

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48967
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported: memcpy: detected field-spanning write (size 129) of single field "target->sensf_res" at net/nfc/nci/ntf.c:260 (size 18) This appears to be a legitimate lack of bounds checking in nci_add_new_protocol(). Add the missing checks.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9 Patch
https://git.kernel.org/stable/c/6778434706940b8fad7ef35f410d2b9929f256d2 Patch
https://git.kernel.org/stable/c/6b37f0dc0638d13a006f2f24d2f6ca61e83bc714 Patch
https://git.kernel.org/stable/c/908b2da426fe9c3ce74cf541ba40e7a4251db191 Patch
https://git.kernel.org/stable/c/cff35329070b96b4484d23f9f48a5ca2c947e750 Patch
https://git.kernel.org/stable/c/dbdcfb9f6748218a149f62468d6297ce3f014e9c Patch
https://git.kernel.org/stable/c/e329e71013c9b5a4535b099208493c7826ee4a64 Patch
https://git.kernel.org/stable/c/f41547546db9af99da2c34e3368664d7a79cefae Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*
History

25 Oct 2024, 21:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CWE CWE-129
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9 - () https://git.kernel.org/stable/c/27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9 - Patch
References () https://git.kernel.org/stable/c/6778434706940b8fad7ef35f410d2b9929f256d2 - () https://git.kernel.org/stable/c/6778434706940b8fad7ef35f410d2b9929f256d2 - Patch
References () https://git.kernel.org/stable/c/6b37f0dc0638d13a006f2f24d2f6ca61e83bc714 - () https://git.kernel.org/stable/c/6b37f0dc0638d13a006f2f24d2f6ca61e83bc714 - Patch
References () https://git.kernel.org/stable/c/908b2da426fe9c3ce74cf541ba40e7a4251db191 - () https://git.kernel.org/stable/c/908b2da426fe9c3ce74cf541ba40e7a4251db191 - Patch
References () https://git.kernel.org/stable/c/cff35329070b96b4484d23f9f48a5ca2c947e750 - () https://git.kernel.org/stable/c/cff35329070b96b4484d23f9f48a5ca2c947e750 - Patch
References () https://git.kernel.org/stable/c/dbdcfb9f6748218a149f62468d6297ce3f014e9c - () https://git.kernel.org/stable/c/dbdcfb9f6748218a149f62468d6297ce3f014e9c - Patch
References () https://git.kernel.org/stable/c/e329e71013c9b5a4535b099208493c7826ee4a64 - () https://git.kernel.org/stable/c/e329e71013c9b5a4535b099208493c7826ee4a64 - Patch
References () https://git.kernel.org/stable/c/f41547546db9af99da2c34e3368664d7a79cefae - () https://git.kernel.org/stable/c/f41547546db9af99da2c34e3368664d7a79cefae - Patch

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFC: nci: Comprobación de los límites de matrices struct nfc_target Mientras se ejecutaba bajo CONFIG_FORTIFY_SOURCE=y, syzkaller informó: memcpy: se detectó una escritura que abarcaba campos (tamaño 129) de un solo campo "target->sensf_res" en net/nfc/nci/ntf.c:260 (tamaño 18) Esto parece ser una falta legítima de comprobación de los límites en nci_add_new_protocol(). Agregue las comprobaciones faltantes.

21 Oct 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 20:15

Updated : 2024-10-25 21:27

NVD link : CVE-2022-48967

Mitre link : CVE-2022-48967

CVE.ORG link : CVE-2022-48967

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index