CVE-2022-48946

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48946

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udf_delete_aext() for deleting extent to avoid some code duplication.

References
Link Resource
https://git.kernel.org/stable/c/12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf Patch
https://git.kernel.org/stable/c/1a075f4a549481ce6e8518d8379f193ccec6b746 Patch
https://git.kernel.org/stable/c/4d835efd561dfb9bf5409f11f4ecd428d5d29226 Patch
https://git.kernel.org/stable/c/63dbbd8f1499b0a161e701a04aa50148d60bd1f7 Patch
https://git.kernel.org/stable/c/72f651c96c8aadf087fd782d551bf7db648a8c2e Patch
https://git.kernel.org/stable/c/7665857f88557c372da35534165721156756f77f Patch
https://git.kernel.org/stable/c/ae56d9a017724f130cf1a263dd82a78d2a6e3852 Patch
https://git.kernel.org/stable/c/c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c Patch
https://git.kernel.org/stable/c/cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1.1:*:*:*:*:*:*:*
History

25 Oct 2024, 20:13

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1.1:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf - () https://git.kernel.org/stable/c/12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf - Patch
References () https://git.kernel.org/stable/c/1a075f4a549481ce6e8518d8379f193ccec6b746 - () https://git.kernel.org/stable/c/1a075f4a549481ce6e8518d8379f193ccec6b746 - Patch
References () https://git.kernel.org/stable/c/4d835efd561dfb9bf5409f11f4ecd428d5d29226 - () https://git.kernel.org/stable/c/4d835efd561dfb9bf5409f11f4ecd428d5d29226 - Patch
References () https://git.kernel.org/stable/c/63dbbd8f1499b0a161e701a04aa50148d60bd1f7 - () https://git.kernel.org/stable/c/63dbbd8f1499b0a161e701a04aa50148d60bd1f7 - Patch
References () https://git.kernel.org/stable/c/72f651c96c8aadf087fd782d551bf7db648a8c2e - () https://git.kernel.org/stable/c/72f651c96c8aadf087fd782d551bf7db648a8c2e - Patch
References () https://git.kernel.org/stable/c/7665857f88557c372da35534165721156756f77f - () https://git.kernel.org/stable/c/7665857f88557c372da35534165721156756f77f - Patch
References () https://git.kernel.org/stable/c/ae56d9a017724f130cf1a263dd82a78d2a6e3852 - () https://git.kernel.org/stable/c/ae56d9a017724f130cf1a263dd82a78d2a6e3852 - Patch
References () https://git.kernel.org/stable/c/c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c - () https://git.kernel.org/stable/c/c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c - Patch
References () https://git.kernel.org/stable/c/cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3 - () https://git.kernel.org/stable/c/cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3 - Patch

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: udf: Se corrige el descarte de preasignación en el límite de extensión indirecta. Cuando la extensión de preasignación es la primera en el bloque de extensión, el código corrompería el encabezado del árbol de extensión. Corrija el problema y use udf_delete_aext() para eliminar la extensión y evitar la duplicación de código.

21 Oct 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 20:15

Updated : 2024-10-25 20:13

NVD link : CVE-2022-48946

Mitre link : CVE-2022-48946

CVE.ORG link : CVE-2022-48946

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo