CVE-2022-49030

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49030

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, so 2 * max_entries will overflow u32 when mapping producer page and data pages. Only casting max_entries to size_t is not enough, because for 32-bits application on 64-bits kernel the size of read-only mmap region also could overflow size_t. So fixing it by casting the size of read-only mmap region into a __u64 and checking whether or not there will be overflow during mmap.

References
Link Resource
https://git.kernel.org/stable/c/0140e079a42064680394fff1199a7b5483688dec Patch
https://git.kernel.org/stable/c/535a25ab4f9a45f74ba38ab71de95e97474922ed Patch
https://git.kernel.org/stable/c/8a549ab6724520aa3c07f47e0eba820293551490 Patch
https://git.kernel.org/stable/c/927cbb478adf917e0a142b94baa37f06279cc466 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
History

24 Oct 2024, 18:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0140e079a42064680394fff1199a7b5483688dec - () https://git.kernel.org/stable/c/0140e079a42064680394fff1199a7b5483688dec - Patch
References () https://git.kernel.org/stable/c/535a25ab4f9a45f74ba38ab71de95e97474922ed - () https://git.kernel.org/stable/c/535a25ab4f9a45f74ba38ab71de95e97474922ed - Patch
References () https://git.kernel.org/stable/c/8a549ab6724520aa3c07f47e0eba820293551490 - () https://git.kernel.org/stable/c/8a549ab6724520aa3c07f47e0eba820293551490 - Patch
References () https://git.kernel.org/stable/c/927cbb478adf917e0a142b94baa37f06279cc466 - () https://git.kernel.org/stable/c/927cbb478adf917e0a142b94baa37f06279cc466 - Patch
First Time Linux
Linux linux Kernel
CWE CWE-190
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: libbpf: desbordamiento de tamaño del controlador para ringbuf mmap El tamaño máximo de ringbuf es de 2 GB en un host x86-64, por lo que 2 * max_entries desbordarán u32 al asignar la página del productor y las páginas de datos. Solo convertir max_entries a size_t no es suficiente, porque para la aplicación de 32 bits en un kernel de 64 bits, el tamaño de la región mmap de solo lectura también podría desbordar size_t. Entonces, arréglelo convirtiendo el tamaño de la región mmap de solo lectura en __u64 y verificando si habrá o no desbordamiento durante mmap.

21 Oct 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 20:15

Updated : 2024-10-24 18:42

NVD link : CVE-2022-49030

Mitre link : CVE-2022-49030

CVE.ORG link : CVE-2022-49030

JSON object : View

Products Affected

linux

CWE
CWE-190

Integer Overflow or Wraparound