CVE-2022-48777

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48777

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped partition (case when the entry name is empty) the kernel panics in the cleanup function as the name entry is NULL. Rework the parser logic by first checking the real partition number and then allocate the space and set the data for the valid partitions. The logic was also fundamentally wrong as with a skipped partition, the parts number returned was incorrect by not decreasing it for the skipped partitions.

References
Link Resource
https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cd Mailing List Patch
https://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548 Mailing List Patch
https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 Mailing List Patch
https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cd Mailing List Patch
https://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548 Mailing List Patch
https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 Mailing List Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:34

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cd - Mailing List, Patch () https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cd - Mailing List, Patch
References () https://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548 - Mailing List, Patch () https://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548 - Mailing List, Patch
References () https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 - Mailing List, Patch () https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 - Mailing List, Patch

21 Aug 2024, 17:52

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: parsers: qcom: corrige el pánico del kernel en la partición omitida En el caso de una partición omitida (caso cuando el nombre de la entrada está vacío), el kernel entra en pánico en la función de limpieza como el nombre la entrada es NULA. Vuelva a trabajar la lógica del analizador verificando primero el número de partición real y luego asigne el espacio y configure los datos para las particiones válidas. La lógica también era fundamentalmente errónea, ya que con una partición omitida, el número de pieza devuelto era incorrecto al no disminuirlo para las particiones omitidas.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
References () https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cd - () https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cd - Mailing List, Patch
References () https://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548 - () https://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548 - Mailing List, Patch
References () https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 - () https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 - Mailing List, Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

16 Jul 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-16 12:15

Updated : 2024-11-21 07:34

NVD link : CVE-2022-48777

Mitre link : CVE-2022-48777

CVE.ORG link : CVE-2022-48777

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference