CVE-2022-49031

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49031
In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403_read_raw KASAN report out-of-bounds read as follows: BUG: KASAN: global-out-of-bounds in afe4403_read_raw+0x42e/0x4c0 Read of size 4 at addr ffffffffc02ac638 by task cat/279 Call Trace: afe4403_read_raw iio_read_channel_info dev_attr_show The buggy address belongs to the variable: afe4403_channel_leds+0x18/0xffffffffffffe9e0 This issue can be reproduced by singe command: $ cat /sys/bus/spi/devices/spi0.0/iio\:device0/in_intensity6_raw The array size of afe4403_channel_leds is less than channels, so access with chan->address cause OOB read in afe4403_read_raw. Fix it by moving access before use it.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06c6ce21cec77dfa860d57e7a006000a57812efb Patch
https://git.kernel.org/stable/c/2d6a437064ffbe685c67ddb16dfc0946074c6c3f Patch
https://git.kernel.org/stable/c/58143c1ed5882c138a3cd2251a336fc8755f23d9 Patch
https://git.kernel.org/stable/c/726fa3e4ab97dcff1c745bdc4fb137366cb8d3df Patch
https://git.kernel.org/stable/c/98afcb5f3be645d330c74c5194ba0d80e26f95e0 Patch
https://git.kernel.org/stable/c/b1756af172fb80a3edc143772d49e166ec691b6c Patch
https://git.kernel.org/stable/c/c9268df36818ee4eaaaeadc80009b442a5ca69c9 Patch
https://git.kernel.org/stable/c/e7e76a77aabef8989cbc0a8417af1aa040620867 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
History

24 Oct 2024, 16:03

Type Values Removed Values Added
CWE CWE-125
References () https://git.kernel.org/stable/c/06c6ce21cec77dfa860d57e7a006000a57812efb - () https://git.kernel.org/stable/c/06c6ce21cec77dfa860d57e7a006000a57812efb - Patch
References () https://git.kernel.org/stable/c/2d6a437064ffbe685c67ddb16dfc0946074c6c3f - () https://git.kernel.org/stable/c/2d6a437064ffbe685c67ddb16dfc0946074c6c3f - Patch
References () https://git.kernel.org/stable/c/58143c1ed5882c138a3cd2251a336fc8755f23d9 - () https://git.kernel.org/stable/c/58143c1ed5882c138a3cd2251a336fc8755f23d9 - Patch
References () https://git.kernel.org/stable/c/726fa3e4ab97dcff1c745bdc4fb137366cb8d3df - () https://git.kernel.org/stable/c/726fa3e4ab97dcff1c745bdc4fb137366cb8d3df - Patch
References () https://git.kernel.org/stable/c/98afcb5f3be645d330c74c5194ba0d80e26f95e0 - () https://git.kernel.org/stable/c/98afcb5f3be645d330c74c5194ba0d80e26f95e0 - Patch
References () https://git.kernel.org/stable/c/b1756af172fb80a3edc143772d49e166ec691b6c - () https://git.kernel.org/stable/c/b1756af172fb80a3edc143772d49e166ec691b6c - Patch
References () https://git.kernel.org/stable/c/c9268df36818ee4eaaaeadc80009b442a5ca69c9 - () https://git.kernel.org/stable/c/c9268df36818ee4eaaaeadc80009b442a5ca69c9 - Patch
References () https://git.kernel.org/stable/c/e7e76a77aabef8989cbc0a8417af1aa040620867 - () https://git.kernel.org/stable/c/e7e76a77aabef8989cbc0a8417af1aa040620867 - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iio: health: afe4403: Se corrige la lectura oob en el informe de KASAN afe4403_read_raw que indica que la lectura está fuera de los límites de la siguiente manera: ERROR: KASAN: global-out-of-bounds en afe4403_read_raw+0x42e/0x4c0 Lectura de tamaño 4 en la dirección ffffffffc02ac638 por la tarea cat/279 Seguimiento de llamadas: afe4403_read_raw iio_read_channel_info dev_attr_show La dirección con errores pertenece a la variable: afe4403_channel_leds+0x18/0xffffffffffffe9e0 Este problema se puede reproducir con un solo comando: $ cat /sys/bus/spi/devices/spi0.0/iio\:device0/in_intensity6_raw El tamaño de la matriz de afe4403_channel_leds es menor que channels, por lo que el acceso con chan->address provoca una lectura OOB en afe4403_read_raw. Solucione el problema moviendo el acceso antes de usarlo.

21 Oct 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 20:15

Updated : 2024-10-24 16:03

NVD link : CVE-2022-49031

Mitre link : CVE-2022-49031

CVE.ORG link : CVE-2022-49031

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read