Vulnerability-Lookup

CERTFR-2024-AVI-0999

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
SUSE	N/A	openSUSE Leap Micro 5.5
SUSE	N/A	SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE	N/A	SUSE Real Time Module 15-SP6
SUSE	N/A	Public Cloud Module 15-SP5
SUSE	N/A	Public Cloud Module 15-SP6
SUSE	N/A	openSUSE Leap 15.5
SUSE	N/A	SUSE Linux Enterprise Live Patching 15-SP6
SUSE	N/A	SUSE Linux Enterprise Server 15 SP5
SUSE	N/A	SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE	N/A	SUSE Linux Enterprise Real Time 15 SP5
SUSE	N/A	SUSE Linux Enterprise Live Patching 15-SP5
SUSE	N/A	SUSE Linux Enterprise Real Time 15 SP6
SUSE	N/A	openSUSE Leap 15.6
SUSE	N/A	SUSE Real Time Module 15-SP5
SUSE	N/A	SUSE Linux Enterprise Server for SAP Applications 15 SP6
SUSE	N/A	SUSE Linux Enterprise Server 15 SP6
SUSE	N/A	SUSE Linux Enterprise Micro 5.5

References

Title

Publication Time

Tags

Bulletin de sécurité SUSE SUSE-SU-2024:3985-1	2024-11-13	vendor-advisory
Bulletin de sécurité SUSE SUSE-SU-2024:3984-1	2024-11-13	vendor-advisory
Bulletin de sécurité SUSE SUSE-SU-2024:3983-1	2024-11-13	vendor-advisory
Bulletin de sécurité SUSE SUSE-SU-2024:3986-1	2024-11-13	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "openSUSE Leap Micro 5.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise High Performance Computing 15 SP5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Real Time Module 15-SP6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "Public Cloud Module 15-SP5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "Public Cloud Module 15-SP6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "openSUSE Leap 15.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Live Patching 15-SP6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 15 SP5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Real Time 15 SP5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Live Patching 15-SP5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Real Time 15 SP6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "openSUSE Leap 15.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Real Time Module 15-SP5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 15 SP6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Micro 5.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2022-3435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3435"
    },
    {
      "name": "CVE-2022-45934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45934"
    },
    {
      "name": "CVE-2023-28327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28327"
    },
    {
      "name": "CVE-2023-2166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2166"
    },
    {
      "name": "CVE-2023-6270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6270"
    },
    {
      "name": "CVE-2024-26761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26761"
    },
    {
      "name": "CVE-2024-27043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27043"
    },
    {
      "name": "CVE-2024-36957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36957"
    },
    {
      "name": "CVE-2021-47416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-47416"
    },
    {
      "name": "CVE-2021-47534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-47534"
    },
    {
      "name": "CVE-2023-52766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52766"
    },
    {
      "name": "CVE-2023-52800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52800"
    },
    {
      "name": "CVE-2024-26758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26758"
    },
    {
      "name": "CVE-2024-26943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26943"
    },
    {
      "name": "CVE-2024-38599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38599"
    },
    {
      "name": "CVE-2024-27026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27026"
    },
    {
      "name": "CVE-2023-52881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52881"
    },
    {
      "name": "CVE-2024-35980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35980"
    },
    {
      "name": "CVE-2024-39476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39476"
    },
    {
      "name": "CVE-2024-26767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26767"
    },
    {
      "name": "CVE-2024-38576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38576"
    },
    {
      "name": "CVE-2024-38577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38577"
    },
    {
      "name": "CVE-2024-41016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41016"
    },
    {
      "name": "CVE-2024-42145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42145"
    },
    {
      "name": "CVE-2024-36244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36244"
    },
    {
      "name": "CVE-2024-40965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40965"
    },
    {
      "name": "CVE-2024-41047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41047"
    },
    {
      "name": "CVE-2024-42226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42226"
    },
    {
      "name": "CVE-2024-42253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42253"
    },
    {
      "name": "CVE-2024-44931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44931"
    },
    {
      "name": "CVE-2024-44947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44947"
    },
    {
      "name": "CVE-2024-41031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41031"
    },
    {
      "name": "CVE-2024-45016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45016"
    },
    {
      "name": "CVE-2024-45025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45025"
    },
    {
      "name": "CVE-2024-46716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46716"
    },
    {
      "name": "CVE-2024-46719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46719"
    },
    {
      "name": "CVE-2024-46721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46721"
    },
    {
      "name": "CVE-2024-46770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46770"
    },
    {
      "name": "CVE-2024-46777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46777"
    },
    {
      "name": "CVE-2024-46802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46802"
    },
    {
      "name": "CVE-2024-46804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46804"
    },
    {
      "name": "CVE-2024-46805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46805"
    },
    {
      "name": "CVE-2024-46807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46807"
    },
    {
      "name": "CVE-2024-46810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46810"
    },
    {
      "name": "CVE-2024-46812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46812"
    },
    {
      "name": "CVE-2024-46814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46814"
    },
    {
      "name": "CVE-2024-46815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46815"
    },
    {
      "name": "CVE-2024-46817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46817"
    },
    {
      "name": "CVE-2024-46818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46818"
    },
    {
      "name": "CVE-2024-46819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46819"
    },
    {
      "name": "CVE-2024-46821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46821"
    },
    {
      "name": "CVE-2024-46826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46826"
    },
    {
      "name": "CVE-2024-46828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46828"
    },
    {
      "name": "CVE-2024-46830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46830"
    },
    {
      "name": "CVE-2024-46835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46835"
    },
    {
      "name": "CVE-2024-46836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46836"
    },
    {
      "name": "CVE-2024-46840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46840"
    },
    {
      "name": "CVE-2024-46846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46846"
    },
    {
      "name": "CVE-2024-46848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46848"
    },
    {
      "name": "CVE-2024-46849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46849"
    },
    {
      "name": "CVE-2024-46852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46852"
    },
    {
      "name": "CVE-2024-46853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46853"
    },
    {
      "name": "CVE-2024-46854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46854"
    },
    {
      "name": "CVE-2024-46855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46855"
    },
    {
      "name": "CVE-2024-46857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46857"
    },
    {
      "name": "CVE-2024-46859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46859"
    },
    {
      "name": "CVE-2024-41082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41082"
    },
    {
      "name": "CVE-2024-46678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46678"
    },
    {
      "name": "CVE-2024-46775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46775"
    },
    {
      "name": "CVE-2024-46797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46797"
    },
    {
      "name": "CVE-2024-47668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47668"
    },
    {
      "name": "CVE-2023-52918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52918"
    },
    {
      "name": "CVE-2024-47663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47663"
    },
    {
      "name": "CVE-2024-47667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47667"
    },
    {
      "name": "CVE-2024-47669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47669"
    },
    {
      "name": "CVE-2022-48664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48664"
    },
    {
      "name": "CVE-2022-48879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48879"
    },
    {
      "name": "CVE-2022-48946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48946"
    },
    {
      "name": "CVE-2022-48947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48947"
    },
    {
      "name": "CVE-2022-48948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48948"
    },
    {
      "name": "CVE-2022-48949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48949"
    },
    {
      "name": "CVE-2022-48951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48951"
    },
    {
      "name": "CVE-2022-48953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48953"
    },
    {
      "name": "CVE-2022-48954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48954"
    },
    {
      "name": "CVE-2022-48955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48955"
    },
    {
      "name": "CVE-2022-48956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48956"
    },
    {
      "name": "CVE-2022-48957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48957"
    },
    {
      "name": "CVE-2022-48958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48958"
    },
    {
      "name": "CVE-2022-48959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48959"
    },
    {
      "name": "CVE-2022-48960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48960"
    },
    {
      "name": "CVE-2022-48961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48961"
    },
    {
      "name": "CVE-2022-48962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48962"
    },
    {
      "name": "CVE-2022-48966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48966"
    },
    {
      "name": "CVE-2022-48967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48967"
    },
    {
      "name": "CVE-2022-48968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48968"
    },
    {
      "name": "CVE-2022-48969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48969"
    },
    {
      "name": "CVE-2022-48970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48970"
    },
    {
      "name": "CVE-2022-48971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48971"
    },
    {
      "name": "CVE-2022-48972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48972"
    },
    {
      "name": "CVE-2022-48973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48973"
    },
    {
      "name": "CVE-2022-48975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48975"
    },
    {
      "name": "CVE-2022-48977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48977"
    },
    {
      "name": "CVE-2022-48978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48978"
    },
    {
      "name": "CVE-2022-48980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48980"
    },
    {
      "name": "CVE-2022-48981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48981"
    },
    {
      "name": "CVE-2022-48985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48985"
    },
    {
      "name": "CVE-2022-48987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48987"
    },
    {
      "name": "CVE-2022-48988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48988"
    },
    {
      "name": "CVE-2022-48991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48991"
    },
    {
      "name": "CVE-2022-48992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48992"
    },
    {
      "name": "CVE-2022-48994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48994"
    },
    {
      "name": "CVE-2022-48995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48995"
    },
    {
      "name": "CVE-2022-48997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48997"
    },
    {
      "name": "CVE-2022-48999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48999"
    },
    {
      "name": "CVE-2022-49000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49000"
    },
    {
      "name": "CVE-2022-49002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49002"
    },
    {
      "name": "CVE-2022-49003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49003"
    },
    {
      "name": "CVE-2022-49005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49005"
    },
    {
      "name": "CVE-2022-49006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49006"
    },
    {
      "name": "CVE-2022-49007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49007"
    },
    {
      "name": "CVE-2022-49010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49010"
    },
    {
      "name": "CVE-2022-49011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49011"
    },
    {
      "name": "CVE-2022-49012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49012"
    },
    {
      "name": "CVE-2022-49014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49014"
    },
    {
      "name": "CVE-2022-49015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49015"
    },
    {
      "name": "CVE-2022-49016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49016"
    },
    {
      "name": "CVE-2022-49017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49017"
    },
    {
      "name": "CVE-2022-49019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49019"
    },
    {
      "name": "CVE-2022-49020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49020"
    },
    {
      "name": "CVE-2022-49021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49021"
    },
    {
      "name": "CVE-2022-49022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49022"
    },
    {
      "name": "CVE-2022-49023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49023"
    },
    {
      "name": "CVE-2022-49024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49024"
    },
    {
      "name": "CVE-2022-49025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49025"
    },
    {
      "name": "CVE-2022-49026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49026"
    },
    {
      "name": "CVE-2022-49027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49027"
    },
    {
      "name": "CVE-2022-49028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49028"
    },
    {
      "name": "CVE-2022-49029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49029"
    },
    {
      "name": "CVE-2022-49031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49031"
    },
    {
      "name": "CVE-2022-49032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49032"
    },
    {
      "name": "CVE-2023-52917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52917"
    },
    {
      "name": "CVE-2023-52919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52919"
    },
    {
      "name": "CVE-2024-44932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44932"
    },
    {
      "name": "CVE-2024-44964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44964"
    },
    {
      "name": "CVE-2024-46754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46754"
    },
    {
      "name": "CVE-2024-46766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46766"
    },
    {
      "name": "CVE-2024-46803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46803"
    },
    {
      "name": "CVE-2024-46806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46806"
    },
    {
      "name": "CVE-2024-46809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46809"
    },
    {
      "name": "CVE-2024-46811",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46811"
    },
    {
      "name": "CVE-2024-46813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46813"
    },
    {
      "name": "CVE-2024-46816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46816"
    },
    {
      "name": "CVE-2024-46825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46825"
    },
    {
      "name": "CVE-2024-46827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46827"
    },
    {
      "name": "CVE-2024-46831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46831"
    },
    {
      "name": "CVE-2024-46834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46834"
    },
    {
      "name": "CVE-2024-46841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46841"
    },
    {
      "name": "CVE-2024-46842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46842"
    },
    {
      "name": "CVE-2024-46843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46843"
    },
    {
      "name": "CVE-2024-46851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46851"
    },
    {
      "name": "CVE-2024-46860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46860"
    },
    {
      "name": "CVE-2024-46861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46861"
    },
    {
      "name": "CVE-2024-46864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46864"
    },
    {
      "name": "CVE-2024-46870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46870"
    },
    {
      "name": "CVE-2024-46871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46871"
    },
    {
      "name": "CVE-2024-47658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47658"
    },
    {
      "name": "CVE-2024-47661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47661"
    },
    {
      "name": "CVE-2024-44958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44958"
    },
    {
      "name": "CVE-2024-47660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47660"
    },
    {
      "name": "CVE-2024-47665",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47665"
    },
    {
      "name": "CVE-2024-47662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47662"
    },
    {
      "name": "CVE-2024-47664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47664"
    },
    {
      "name": "CVE-2024-47670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47670"
    },
    {
      "name": "CVE-2024-47671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47671"
    },
    {
      "name": "CVE-2024-47672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47672"
    },
    {
      "name": "CVE-2024-47673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47673"
    },
    {
      "name": "CVE-2024-47674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47674"
    },
    {
      "name": "CVE-2024-47675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47675"
    },
    {
      "name": "CVE-2024-47681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47681"
    },
    {
      "name": "CVE-2024-47682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47682"
    },
    {
      "name": "CVE-2024-47684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47684"
    },
    {
      "name": "CVE-2024-47685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47685"
    },
    {
      "name": "CVE-2024-47686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47686"
    },
    {
      "name": "CVE-2024-47687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47687"
    },
    {
      "name": "CVE-2024-47688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47688"
    },
    {
      "name": "CVE-2024-47692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47692"
    },
    {
      "name": "CVE-2024-47693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47693"
    },
    {
      "name": "CVE-2024-47695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47695"
    },
    {
      "name": "CVE-2024-47696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47696"
    },
    {
      "name": "CVE-2024-47697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47697"
    },
    {
      "name": "CVE-2024-47698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47698"
    },
    {
      "name": "CVE-2024-47699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47699"
    },
    {
      "name": "CVE-2024-47702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47702"
    },
    {
      "name": "CVE-2024-47704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47704"
    },
    {
      "name": "CVE-2024-47705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47705"
    },
    {
      "name": "CVE-2024-47706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47706"
    },
    {
      "name": "CVE-2024-47707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47707"
    },
    {
      "name": "CVE-2024-47709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47709"
    },
    {
      "name": "CVE-2024-47710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47710"
    },
    {
      "name": "CVE-2024-47712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47712"
    },
    {
      "name": "CVE-2024-47713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47713"
    },
    {
      "name": "CVE-2024-47714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47714"
    },
    {
      "name": "CVE-2024-47715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47715"
    },
    {
      "name": "CVE-2024-47718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47718"
    },
    {
      "name": "CVE-2024-47719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47719"
    },
    {
      "name": "CVE-2024-47720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47720"
    },
    {
      "name": "CVE-2024-47723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47723"
    },
    {
      "name": "CVE-2024-47727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47727"
    },
    {
      "name": "CVE-2024-47728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47728"
    },
    {
      "name": "CVE-2024-47730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47730"
    },
    {
      "name": "CVE-2024-47731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47731"
    },
    {
      "name": "CVE-2024-47732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47732"
    },
    {
      "name": "CVE-2024-47735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47735"
    },
    {
      "name": "CVE-2024-47737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47737"
    },
    {
      "name": "CVE-2024-47738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47738"
    },
    {
      "name": "CVE-2024-47739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47739"
    },
    {
      "name": "CVE-2024-47741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47741"
    },
    {
      "name": "CVE-2024-47742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47742"
    },
    {
      "name": "CVE-2024-47743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47743"
    },
    {
      "name": "CVE-2024-47744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47744"
    },
    {
      "name": "CVE-2024-47745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47745"
    },
    {
      "name": "CVE-2024-47747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47747"
    },
    {
      "name": "CVE-2024-47748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47748"
    },
    {
      "name": "CVE-2024-47749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47749"
    },
    {
      "name": "CVE-2024-47750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47750"
    },
    {
      "name": "CVE-2024-47751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47751"
    },
    {
      "name": "CVE-2024-47752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47752"
    },
    {
      "name": "CVE-2024-47753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47753"
    },
    {
      "name": "CVE-2024-47754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47754"
    },
    {
      "name": "CVE-2024-47756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47756"
    },
    {
      "name": "CVE-2024-47757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47757"
    },
    {
      "name": "CVE-2024-49850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49850"
    },
    {
      "name": "CVE-2024-49851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49851"
    },
    {
      "name": "CVE-2024-49852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49852"
    },
    {
      "name": "CVE-2024-49853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49853"
    },
    {
      "name": "CVE-2024-49855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49855"
    },
    {
      "name": "CVE-2024-49858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49858"
    },
    {
      "name": "CVE-2024-49860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49860"
    },
    {
      "name": "CVE-2024-49861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49861"
    },
    {
      "name": "CVE-2024-49862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49862"
    },
    {
      "name": "CVE-2024-49863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49863"
    },
    {
      "name": "CVE-2024-49864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49864"
    },
    {
      "name": "CVE-2024-49866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49866"
    },
    {
      "name": "CVE-2024-49867",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49867"
    },
    {
      "name": "CVE-2024-49870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49870"
    },
    {
      "name": "CVE-2024-49871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49871"
    },
    {
      "name": "CVE-2024-49874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49874"
    },
    {
      "name": "CVE-2024-49875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49875"
    },
    {
      "name": "CVE-2024-49877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49877"
    },
    {
      "name": "CVE-2024-49878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49878"
    },
    {
      "name": "CVE-2024-49879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49879"
    },
    {
      "name": "CVE-2024-49881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49881"
    },
    {
      "name": "CVE-2024-49882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49882"
    },
    {
      "name": "CVE-2024-49883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49883"
    },
    {
      "name": "CVE-2024-49886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49886"
    },
    {
      "name": "CVE-2024-49888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49888"
    },
    {
      "name": "CVE-2024-49890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49890"
    },
    {
      "name": "CVE-2024-49891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49891"
    },
    {
      "name": "CVE-2024-49892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49892"
    },
    {
      "name": "CVE-2024-49894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49894"
    },
    {
      "name": "CVE-2024-49895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49895"
    },
    {
      "name": "CVE-2024-49896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49896"
    },
    {
      "name": "CVE-2024-49897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49897"
    },
    {
      "name": "CVE-2024-49898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49898"
    },
    {
      "name": "CVE-2024-49899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49899"
    },
    {
      "name": "CVE-2024-49900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49900"
    },
    {
      "name": "CVE-2024-49901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49901"
    },
    {
      "name": "CVE-2024-49902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49902"
    },
    {
      "name": "CVE-2024-49903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49903"
    },
    {
      "name": "CVE-2024-49906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49906"
    },
    {
      "name": "CVE-2024-49907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49907"
    },
    {
      "name": "CVE-2024-49908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49908"
    },
    {
      "name": "CVE-2024-49909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49909"
    },
    {
      "name": "CVE-2024-49911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49911"
    },
    {
      "name": "CVE-2024-49912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49912"
    },
    {
      "name": "CVE-2024-49913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49913"
    },
    {
      "name": "CVE-2024-49914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49914"
    },
    {
      "name": "CVE-2024-49917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49917"
    },
    {
      "name": "CVE-2024-49918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49918"
    },
    {
      "name": "CVE-2024-49919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49919"
    },
    {
      "name": "CVE-2024-49920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49920"
    },
    {
      "name": "CVE-2024-49922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49922"
    },
    {
      "name": "CVE-2024-49923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49923"
    },
    {
      "name": "CVE-2024-49928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49928"
    },
    {
      "name": "CVE-2024-49929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49929"
    },
    {
      "name": "CVE-2024-49930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49930"
    },
    {
      "name": "CVE-2024-49931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49931"
    },
    {
      "name": "CVE-2024-49933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49933"
    },
    {
      "name": "CVE-2024-49935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49935"
    },
    {
      "name": "CVE-2024-49936",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49936"
    },
    {
      "name": "CVE-2024-49937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49937"
    },
    {
      "name": "CVE-2024-49938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49938"
    },
    {
      "name": "CVE-2024-49939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49939"
    },
    {
      "name": "CVE-2024-49946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49946"
    },
    {
      "name": "CVE-2024-49947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49947"
    },
    {
      "name": "CVE-2024-49949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49949"
    },
    {
      "name": "CVE-2024-49950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49950"
    },
    {
      "name": "CVE-2024-49953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49953"
    },
    {
      "name": "CVE-2024-49954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49954"
    },
    {
      "name": "CVE-2024-49955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49955"
    },
    {
      "name": "CVE-2024-49957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49957"
    },
    {
      "name": "CVE-2024-49958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49958"
    },
    {
      "name": "CVE-2024-49959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49959"
    },
    {
      "name": "CVE-2024-49960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49960"
    },
    {
      "name": "CVE-2024-49961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49961"
    },
    {
      "name": "CVE-2024-49962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49962"
    },
    {
      "name": "CVE-2024-49963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49963"
    },
    {
      "name": "CVE-2024-49965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49965"
    },
    {
      "name": "CVE-2024-49966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49966"
    },
    {
      "name": "CVE-2024-49967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49967"
    },
    {
      "name": "CVE-2024-49969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49969"
    },
    {
      "name": "CVE-2024-49972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49972"
    },
    {
      "name": "CVE-2024-49973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49973"
    },
    {
      "name": "CVE-2024-49974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49974"
    },
    {
      "name": "CVE-2024-49975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49975"
    },
    {
      "name": "CVE-2024-49981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49981"
    },
    {
      "name": "CVE-2024-49982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49982"
    },
    {
      "name": "CVE-2024-49985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49985"
    },
    {
      "name": "CVE-2024-49986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49986"
    },
    {
      "name": "CVE-2024-49991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49991"
    },
    {
      "name": "CVE-2024-49993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49993"
    },
    {
      "name": "CVE-2024-49995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49995"
    },
    {
      "name": "CVE-2024-49996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49996"
    },
    {
      "name": "CVE-2024-50000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50000"
    },
    {
      "name": "CVE-2024-50001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50001"
    },
    {
      "name": "CVE-2024-50002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50002"
    },
    {
      "name": "CVE-2024-50006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50006"
    },
    {
      "name": "CVE-2024-50007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50007"
    },
    {
      "name": "CVE-2024-50008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50008"
    },
    {
      "name": "CVE-2024-50013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50013"
    },
    {
      "name": "CVE-2024-50014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50014"
    },
    {
      "name": "CVE-2024-50015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50015"
    },
    {
      "name": "CVE-2024-50017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50017"
    },
    {
      "name": "CVE-2024-50019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50019"
    },
    {
      "name": "CVE-2024-50020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50020"
    },
    {
      "name": "CVE-2024-50021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50021"
    },
    {
      "name": "CVE-2024-50022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50022"
    },
    {
      "name": "CVE-2024-50023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50023"
    },
    {
      "name": "CVE-2024-50024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50024"
    },
    {
      "name": "CVE-2024-50025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50025"
    },
    {
      "name": "CVE-2024-50027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50027"
    },
    {
      "name": "CVE-2024-50028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50028"
    },
    {
      "name": "CVE-2024-50031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50031"
    },
    {
      "name": "CVE-2024-50033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50033"
    },
    {
      "name": "CVE-2024-50035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50035"
    },
    {
      "name": "CVE-2024-50040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50040"
    },
    {
      "name": "CVE-2024-50041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50041"
    },
    {
      "name": "CVE-2024-50042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50042"
    },
    {
      "name": "CVE-2024-50044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50044"
    },
    {
      "name": "CVE-2024-50045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50045"
    },
    {
      "name": "CVE-2024-50046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50046"
    },
    {
      "name": "CVE-2024-50047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50047"
    },
    {
      "name": "CVE-2024-50048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50048"
    },
    {
      "name": "CVE-2024-50049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50049"
    },
    {
      "name": "CVE-2024-50055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50055"
    },
    {
      "name": "CVE-2024-50058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50058"
    },
    {
      "name": "CVE-2024-50059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50059"
    },
    {
      "name": "CVE-2024-50060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50060"
    },
    {
      "name": "CVE-2024-50061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50061"
    },
    {
      "name": "CVE-2024-50062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50062"
    },
    {
      "name": "CVE-2024-50063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50063"
    },
    {
      "name": "CVE-2024-50064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50064"
    },
    {
      "name": "CVE-2024-50069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50069"
    },
    {
      "name": "CVE-2024-50073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50073"
    },
    {
      "name": "CVE-2024-50074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50074"
    },
    {
      "name": "CVE-2024-50075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50075"
    },
    {
      "name": "CVE-2024-50076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50076"
    },
    {
      "name": "CVE-2024-50077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50077"
    },
    {
      "name": "CVE-2024-50078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50078"
    },
    {
      "name": "CVE-2024-50080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50080"
    },
    {
      "name": "CVE-2024-50081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50081"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0999",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-11-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de SUSE. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de SUSE",
  "vendor_advisories": [
    {
      "published_at": "2024-11-13",
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2024:3985-1",
      "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243985-1"
    },
    {
      "published_at": "2024-11-13",
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2024:3984-1",
      "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243984-1"
    },
    {
      "published_at": "2024-11-13",
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2024:3983-1",
      "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243983-1"
    },
    {
      "published_at": "2024-11-13",
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SU-2024:3986-1",
      "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243986-1"
    }
  ]
}

CVE-2021-47416 (GCVE-0-2021-47416)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:04 – Updated: 2026-05-11 13:54

Title

phy: mdio: fix memory leak

Summary

In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic. MDIOBUS_ALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and __mdiobus_register() fails, but device_register() was called In case of device_register() has been called we should call put_device() to correctly free the memory allocated for this device, but mdiobus_free() calls just kfree(dev) in case of MDIOBUS_ALLOCATED state To avoid this behaviour we need to set bus->state to MDIOBUS_UNREGISTERED _before_ calling device_register(), because put_device() should be called even in case of device_register() failure.

Severity

No CVSS data available.

Assigner

Linux

References

8 references

URL	Tags
https://git.kernel.org/stable/c/25e9f88c7e3cc35f5…
https://git.kernel.org/stable/c/2250392d930bd0d98…
https://git.kernel.org/stable/c/f4f502a04ee1e5438…
https://git.kernel.org/stable/c/2397b9e1187212924…
https://git.kernel.org/stable/c/414bb4ead1362ef2c…
https://git.kernel.org/stable/c/0d2dd40a7be61b89a…
https://git.kernel.org/stable/c/064c2616234a73948…
https://git.kernel.org/stable/c/ca6e11c337daf7925…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < 25e9f88c7e3cc35f5e3d3db199660d28a15df639 (git) Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < 2250392d930bd0d989f24d355d6355b0150256e7 (git) Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < f4f502a04ee1e543825af78f47eb7785015cd9f6 (git) Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < 2397b9e118721292429fea8807a698e71b94795f (git) Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < 414bb4ead1362ef2c8592db723c017258f213988 (git) Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < 0d2dd40a7be61b89a7c99dae8ee96389d27b413a (git) Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < 064c2616234a7394867c924b5c1303974f3a4f4d (git) Affected: 46abc02175b3c246dd5141d878f565a8725060c9 , < ca6e11c337daf7925ff8a2aac8e84490a8691905 (git)
Linux	Linux	Affected: 2.6.28 Unaffected: 0 , < 2.6.28 (semver) Unaffected: 4.4.289 , ≤ 4.4.* (semver) Unaffected: 4.9.287 , ≤ 4.9.* (semver) Unaffected: 4.14.251 , ≤ 4.14.* (semver) Unaffected: 4.19.211 , ≤ 4.19.* (semver) Unaffected: 5.4.153 , ≤ 5.4.* (semver) Unaffected: 5.10.73 , ≤ 5.10.* (semver) Unaffected: 5.14.12 , ≤ 5.14.* (semver) Unaffected: 5.15 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47416",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-21T17:32:44.904318Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:15:14.542Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/25e9f88c7e3cc35f5e3d3db199660d28a15df639"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2250392d930bd0d989f24d355d6355b0150256e7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f4f502a04ee1e543825af78f47eb7785015cd9f6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2397b9e118721292429fea8807a698e71b94795f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/414bb4ead1362ef2c8592db723c017258f213988"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0d2dd40a7be61b89a7c99dae8ee96389d27b413a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/064c2616234a7394867c924b5c1303974f3a4f4d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ca6e11c337daf7925ff8a2aac8e84490a8691905"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/phy/mdio_bus.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "25e9f88c7e3cc35f5e3d3db199660d28a15df639",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            },
            {
              "lessThan": "2250392d930bd0d989f24d355d6355b0150256e7",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            },
            {
              "lessThan": "f4f502a04ee1e543825af78f47eb7785015cd9f6",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            },
            {
              "lessThan": "2397b9e118721292429fea8807a698e71b94795f",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            },
            {
              "lessThan": "414bb4ead1362ef2c8592db723c017258f213988",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            },
            {
              "lessThan": "0d2dd40a7be61b89a7c99dae8ee96389d27b413a",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            },
            {
              "lessThan": "064c2616234a7394867c924b5c1303974f3a4f4d",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            },
            {
              "lessThan": "ca6e11c337daf7925ff8a2aac8e84490a8691905",
              "status": "affected",
              "version": "46abc02175b3c246dd5141d878f565a8725060c9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/phy/mdio_bus.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.28"
            },
            {
              "lessThan": "2.6.28",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.289",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.287",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.251",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.73",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.14.*",
              "status": "unaffected",
              "version": "5.14.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.289",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.287",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.251",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.211",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.153",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.73",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14.12",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15",
                  "versionStartIncluding": "2.6.28",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: mdio: fix memory leak\n\nSyzbot reported memory leak in MDIO bus interface, the problem was in\nwrong state logic.\n\nMDIOBUS_ALLOCATED indicates 2 states:\n\t1. Bus is only allocated\n\t2. Bus allocated and __mdiobus_register() fails, but\n\t   device_register() was called\n\nIn case of device_register() has been called we should call put_device()\nto correctly free the memory allocated for this device, but mdiobus_free()\ncalls just kfree(dev) in case of MDIOBUS_ALLOCATED state\n\nTo avoid this behaviour we need to set bus-\u003estate to MDIOBUS_UNREGISTERED\n_before_ calling device_register(), because put_device() should be\ncalled even in case of device_register() failure."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:54:16.957Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/25e9f88c7e3cc35f5e3d3db199660d28a15df639"
        },
        {
          "url": "https://git.kernel.org/stable/c/2250392d930bd0d989f24d355d6355b0150256e7"
        },
        {
          "url": "https://git.kernel.org/stable/c/f4f502a04ee1e543825af78f47eb7785015cd9f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/2397b9e118721292429fea8807a698e71b94795f"
        },
        {
          "url": "https://git.kernel.org/stable/c/414bb4ead1362ef2c8592db723c017258f213988"
        },
        {
          "url": "https://git.kernel.org/stable/c/0d2dd40a7be61b89a7c99dae8ee96389d27b413a"
        },
        {
          "url": "https://git.kernel.org/stable/c/064c2616234a7394867c924b5c1303974f3a4f4d"
        },
        {
          "url": "https://git.kernel.org/stable/c/ca6e11c337daf7925ff8a2aac8e84490a8691905"
        }
      ],
      "title": "phy: mdio: fix memory leak",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47416",
    "datePublished": "2024-05-21T15:04:06.042Z",
    "dateReserved": "2024-05-21T14:58:30.818Z",
    "dateUpdated": "2026-05-11T13:54:16.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47534 (GCVE-0-2021-47534)

Vulnerability from cvelistv5 – Published: 2024-05-24 15:09 – Updated: 2026-05-11 13:56

Title

drm/vc4: kms: Add missing drm_crtc_commit_put

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Add missing drm_crtc_commit_put Commit 9ec03d7f1ed3 ("drm/vc4: kms: Wait on previous FIFO users before a commit") introduced a global state for the HVS, with each FIFO storing the current CRTC commit so that we can properly synchronize commits. However, the refcounting was off and we thus ended up leaking the drm_crtc_commit structure every commit. Add a drm_crtc_commit_put to prevent the leakage.

Severity

4.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-noinfo Not enough information

Assigner

Linux

References

2 references

URL	Tags
https://git.kernel.org/stable/c/53f9601e908d42481…
https://git.kernel.org/stable/c/049cfff8d53a30cae…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 9ec03d7f1ed394897891319a4dda75f52c5d292d , < 53f9601e908d42481addd67cdb01a9288c611124 (git) Affected: 9ec03d7f1ed394897891319a4dda75f52c5d292d , < 049cfff8d53a30cae3349ff71a4c01b7d9981bc2 (git)
Linux	Linux	Affected: 5.12 Unaffected: 0 , < 5.12 (semver) Unaffected: 5.15.7 , ≤ 5.15.* (semver) Unaffected: 5.16 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 4.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-47534",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-29T16:50:30.871991Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T16:13:57.750Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.777Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/vc4/vc4_kms.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "53f9601e908d42481addd67cdb01a9288c611124",
              "status": "affected",
              "version": "9ec03d7f1ed394897891319a4dda75f52c5d292d",
              "versionType": "git"
            },
            {
              "lessThan": "049cfff8d53a30cae3349ff71a4c01b7d9981bc2",
              "status": "affected",
              "version": "9ec03d7f1ed394897891319a4dda75f52c5d292d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/vc4/vc4_kms.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.7",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: kms: Add missing drm_crtc_commit_put\n\nCommit 9ec03d7f1ed3 (\"drm/vc4: kms: Wait on previous FIFO users before a\ncommit\") introduced a global state for the HVS, with each FIFO storing\nthe current CRTC commit so that we can properly synchronize commits.\n\nHowever, the refcounting was off and we thus ended up leaking the\ndrm_crtc_commit structure every commit. Add a drm_crtc_commit_put to\nprevent the leakage."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:56:31.293Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/53f9601e908d42481addd67cdb01a9288c611124"
        },
        {
          "url": "https://git.kernel.org/stable/c/049cfff8d53a30cae3349ff71a4c01b7d9981bc2"
        }
      ],
      "title": "drm/vc4: kms: Add missing drm_crtc_commit_put",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47534",
    "datePublished": "2024-05-24T15:09:43.344Z",
    "dateReserved": "2024-05-24T15:02:54.826Z",
    "dateUpdated": "2026-05-11T13:56:31.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-3435 (GCVE-0-2022-3435)

Vulnerability from cvelistv5 – Published: 2022-10-08 00:00 – Updated: 2025-04-15 13:46

Title

Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds

Summary

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-119 - Memory Corruption -> CWE-125 Out-of-Bounds Read

Assigner

VulDB

References

6 references

URL	Tags
https://lore.kernel.org/netdev/20221005181257.889…
https://vuldb.com/?id.210357
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list

Impacted products

1 product

Vendor	Product	Version
Linux	Kernel	Affected: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:07:06.583Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/netdev/20221005181257.8897-1-dsahern%40kernel.org/T/#u"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://vuldb.com/?id.210357"
          },
          {
            "name": "FEDORA-2022-2cfbe17910",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/"
          },
          {
            "name": "FEDORA-2022-b948fc3cfb",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/"
          },
          {
            "name": "FEDORA-2022-1a5b125ac6",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/"
          },
          {
            "name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-3435",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T17:10:02.272892Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-15T13:46:07.987Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119 Memory Corruption -\u003e CWE-125 Out-of-Bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-22T00:00:00.000Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "url": "https://lore.kernel.org/netdev/20221005181257.8897-1-dsahern%40kernel.org/T/#u"
        },
        {
          "url": "https://vuldb.com/?id.210357"
        },
        {
          "name": "FEDORA-2022-2cfbe17910",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/"
        },
        {
          "name": "FEDORA-2022-b948fc3cfb",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/"
        },
        {
          "name": "FEDORA-2022-1a5b125ac6",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/"
        },
        {
          "name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
        }
      ],
      "title": "Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds",
      "x_generator": "vuldb.com"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2022-3435",
    "datePublished": "2022-10-08T00:00:00.000Z",
    "dateReserved": "2022-10-08T00:00:00.000Z",
    "dateUpdated": "2025-04-15T13:46:07.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-45934 (GCVE-0-2022-45934)

Vulnerability from cvelistv5 – Published: 2022-11-27 00:00 – Updated: 2025-04-29 13:41

Summary

An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Assigner

mitre

References

6 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/b…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.netapp.com/advisory/ntap-2023011…
https://www.debian.org/security/2023/dsa-5324	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:24:03.231Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=ae4569813a6e931258db627cdfe50dfb4f917d5d"
          },
          {
            "name": "FEDORA-2022-90162a1d88",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDAKCGDW6CQ6G3RZWYZJO454R3L5CTQB/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230113-0008/"
          },
          {
            "name": "DSA-5324",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5324"
          },
          {
            "name": "[debian-lts-announce] 20230302 [SECURITY] [DLA 3349-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"
          },
          {
            "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-45934",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-29T13:40:38.316119Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-190",
                "description": "CWE-190 Integer Overflow or Wraparound",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-29T13:41:05.963Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-03T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=ae4569813a6e931258db627cdfe50dfb4f917d5d"
        },
        {
          "name": "FEDORA-2022-90162a1d88",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDAKCGDW6CQ6G3RZWYZJO454R3L5CTQB/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230113-0008/"
        },
        {
          "name": "DSA-5324",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5324"
        },
        {
          "name": "[debian-lts-announce] 20230302 [SECURITY] [DLA 3349-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"
        },
        {
          "name": "[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-45934",
    "datePublished": "2022-11-27T00:00:00.000Z",
    "dateReserved": "2022-11-27T00:00:00.000Z",
    "dateUpdated": "2025-04-29T13:41:05.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-48664 (GCVE-0-2022-48664)

Vulnerability from cvelistv5 – Published: 2024-04-28 13:01 – Updated: 2026-05-23 15:20

Title

btrfs: fix hang during unmount when stopping a space reclaim worker

Summary

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker Often when running generic/562 from fstests we can hang during unmount, resulting in a trace like this: Sep 07 11:52:00 debian9 unknown: run fstests generic/562 at 2022-09-07 11:52:00 Sep 07 11:55:32 debian9 kernel: INFO: task umount:49438 blocked for more than 120 seconds. Sep 07 11:55:32 debian9 kernel: Not tainted 6.0.0-rc2-btrfs-next-122 #1 Sep 07 11:55:32 debian9 kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Sep 07 11:55:32 debian9 kernel: task:umount state:D stack: 0 pid:49438 ppid: 25683 flags:0x00004000 Sep 07 11:55:32 debian9 kernel: Call Trace: Sep 07 11:55:32 debian9 kernel: <TASK> Sep 07 11:55:32 debian9 kernel: __schedule+0x3c8/0xec0 Sep 07 11:55:32 debian9 kernel: ? rcu_read_lock_sched_held+0x12/0x70 Sep 07 11:55:32 debian9 kernel: schedule+0x5d/0xf0 Sep 07 11:55:32 debian9 kernel: schedule_timeout+0xf1/0x130 Sep 07 11:55:32 debian9 kernel: ? lock_release+0x224/0x4a0 Sep 07 11:55:32 debian9 kernel: ? lock_acquired+0x1a0/0x420 Sep 07 11:55:32 debian9 kernel: ? trace_hardirqs_on+0x2c/0xd0 Sep 07 11:55:32 debian9 kernel: __wait_for_common+0xac/0x200 Sep 07 11:55:32 debian9 kernel: ? usleep_range_state+0xb0/0xb0 Sep 07 11:55:32 debian9 kernel: __flush_work+0x26d/0x530 Sep 07 11:55:32 debian9 kernel: ? flush_workqueue_prep_pwqs+0x140/0x140 Sep 07 11:55:32 debian9 kernel: ? trace_clock_local+0xc/0x30 Sep 07 11:55:32 debian9 kernel: __cancel_work_timer+0x11f/0x1b0 Sep 07 11:55:32 debian9 kernel: ? close_ctree+0x12b/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? __trace_bputs+0x10b/0x170 Sep 07 11:55:32 debian9 kernel: close_ctree+0x152/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? evict_inodes+0x166/0x1c0 Sep 07 11:55:32 debian9 kernel: generic_shutdown_super+0x71/0x120 Sep 07 11:55:32 debian9 kernel: kill_anon_super+0x14/0x30 Sep 07 11:55:32 debian9 kernel: btrfs_kill_super+0x12/0x20 [btrfs] Sep 07 11:55:32 debian9 kernel: deactivate_locked_super+0x2e/0xa0 Sep 07 11:55:32 debian9 kernel: cleanup_mnt+0x100/0x160 Sep 07 11:55:32 debian9 kernel: task_work_run+0x59/0xa0 Sep 07 11:55:32 debian9 kernel: exit_to_user_mode_prepare+0x1a6/0x1b0 Sep 07 11:55:32 debian9 kernel: syscall_exit_to_user_mode+0x16/0x40 Sep 07 11:55:32 debian9 kernel: do_syscall_64+0x48/0x90 Sep 07 11:55:32 debian9 kernel: entry_SYSCALL_64_after_hwframe+0x63/0xcd Sep 07 11:55:32 debian9 kernel: RIP: 0033:0x7fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RSP: 002b:00007ffe914217c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 Sep 07 11:55:32 debian9 kernel: RAX: 0000000000000000 RBX: 00007fcde5ae8264 RCX: 00007fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055b57556cdd0 Sep 07 11:55:32 debian9 kernel: RBP: 000055b57556cba0 R08: 0000000000000000 R09: 00007ffe91420570 Sep 07 11:55:32 debian9 kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 Sep 07 11:55:32 debian9 kernel: R13: 000055b57556cdd0 R14: 000055b57556ccb8 R15: 0000000000000000 Sep 07 11:55:32 debian9 kernel: </TASK> What happens is the following: 1) The cleaner kthread tries to start a transaction to delete an unused block group, but the metadata reservation can not be satisfied right away, so a reservation ticket is created and it starts the async metadata reclaim task (fs_info->async_reclaim_work); 2) Writeback for all the filler inodes with an i_size of 2K starts (generic/562 creates a lot of 2K files with the goal of filling metadata space). We try to create an inline extent for them, but we fail when trying to insert the inline extent with -ENOSPC (at cow_file_range_inline()) - since this is not critical, we fallback to non-inline mode (back to cow_file_range()), reserve extents ---truncated---

Severity

No CVSS data available.

Assigner

Linux

References

4 references

URL	Tags
https://git.kernel.org/stable/c/6ac5b52e3f352f9cb…
https://git.kernel.org/stable/c/d8a76a2e514fbbb31…
https://git.kernel.org/stable/c/c338bea1fec550429…
https://git.kernel.org/stable/c/a362bb864b8db4861…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d6fd0ae25c6495674dc5a41a8d16bc8e0073276d , < 6ac5b52e3f352f9cb270c89e6e1d4dadb564ddb8 (git) Affected: d6fd0ae25c6495674dc5a41a8d16bc8e0073276d , < d8a76a2e514fbbb315a6dfff2d342de2de833994 (git) Affected: d6fd0ae25c6495674dc5a41a8d16bc8e0073276d , < c338bea1fec5504290dc0acf026c9e7dba25004b (git) Affected: d6fd0ae25c6495674dc5a41a8d16bc8e0073276d , < a362bb864b8db4861977d00bd2c3222503ccc34b (git) Affected: 1ec2bf44c3770b9c3d510b1e78d50cd7fd19e8c5 (git) Affected: b4c7c826709b7d882ec9b264d5032e887e6bd720 (git) Affected: 4.14.120 , < 4.15 (semver) Affected: 4.19.12 , < 4.20 (semver)
Linux	Linux	Affected: 4.20 Unaffected: 0 , < 4.20 (semver) Unaffected: 5.10.147 , ≤ 5.10.* (semver) Unaffected: 5.15.71 , ≤ 5.15.* (semver) Unaffected: 5.19.12 , ≤ 5.19.* (semver) Unaffected: 6.0 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48664",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-28T18:11:19.564410Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:16:37.812Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:17:55.826Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6ac5b52e3f352f9cb270c89e6e1d4dadb564ddb8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d8a76a2e514fbbb315a6dfff2d342de2de833994"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c338bea1fec5504290dc0acf026c9e7dba25004b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a362bb864b8db4861977d00bd2c3222503ccc34b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/disk-io.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6ac5b52e3f352f9cb270c89e6e1d4dadb564ddb8",
              "status": "affected",
              "version": "d6fd0ae25c6495674dc5a41a8d16bc8e0073276d",
              "versionType": "git"
            },
            {
              "lessThan": "d8a76a2e514fbbb315a6dfff2d342de2de833994",
              "status": "affected",
              "version": "d6fd0ae25c6495674dc5a41a8d16bc8e0073276d",
              "versionType": "git"
            },
            {
              "lessThan": "c338bea1fec5504290dc0acf026c9e7dba25004b",
              "status": "affected",
              "version": "d6fd0ae25c6495674dc5a41a8d16bc8e0073276d",
              "versionType": "git"
            },
            {
              "lessThan": "a362bb864b8db4861977d00bd2c3222503ccc34b",
              "status": "affected",
              "version": "d6fd0ae25c6495674dc5a41a8d16bc8e0073276d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1ec2bf44c3770b9c3d510b1e78d50cd7fd19e8c5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b4c7c826709b7d882ec9b264d5032e887e6bd720",
              "versionType": "git"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.120",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.12",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/disk-io.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.147",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.71",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.147",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.71",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.12",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.120",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix hang during unmount when stopping a space reclaim worker\n\nOften when running generic/562 from fstests we can hang during unmount,\nresulting in a trace like this:\n\n  Sep 07 11:52:00 debian9 unknown: run fstests generic/562 at 2022-09-07 11:52:00\n  Sep 07 11:55:32 debian9 kernel: INFO: task umount:49438 blocked for more than 120 seconds.\n  Sep 07 11:55:32 debian9 kernel:       Not tainted 6.0.0-rc2-btrfs-next-122 #1\n  Sep 07 11:55:32 debian9 kernel: \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n  Sep 07 11:55:32 debian9 kernel: task:umount          state:D stack:    0 pid:49438 ppid: 25683 flags:0x00004000\n  Sep 07 11:55:32 debian9 kernel: Call Trace:\n  Sep 07 11:55:32 debian9 kernel:  \u003cTASK\u003e\n  Sep 07 11:55:32 debian9 kernel:  __schedule+0x3c8/0xec0\n  Sep 07 11:55:32 debian9 kernel:  ? rcu_read_lock_sched_held+0x12/0x70\n  Sep 07 11:55:32 debian9 kernel:  schedule+0x5d/0xf0\n  Sep 07 11:55:32 debian9 kernel:  schedule_timeout+0xf1/0x130\n  Sep 07 11:55:32 debian9 kernel:  ? lock_release+0x224/0x4a0\n  Sep 07 11:55:32 debian9 kernel:  ? lock_acquired+0x1a0/0x420\n  Sep 07 11:55:32 debian9 kernel:  ? trace_hardirqs_on+0x2c/0xd0\n  Sep 07 11:55:32 debian9 kernel:  __wait_for_common+0xac/0x200\n  Sep 07 11:55:32 debian9 kernel:  ? usleep_range_state+0xb0/0xb0\n  Sep 07 11:55:32 debian9 kernel:  __flush_work+0x26d/0x530\n  Sep 07 11:55:32 debian9 kernel:  ? flush_workqueue_prep_pwqs+0x140/0x140\n  Sep 07 11:55:32 debian9 kernel:  ? trace_clock_local+0xc/0x30\n  Sep 07 11:55:32 debian9 kernel:  __cancel_work_timer+0x11f/0x1b0\n  Sep 07 11:55:32 debian9 kernel:  ? close_ctree+0x12b/0x5b3 [btrfs]\n  Sep 07 11:55:32 debian9 kernel:  ? __trace_bputs+0x10b/0x170\n  Sep 07 11:55:32 debian9 kernel:  close_ctree+0x152/0x5b3 [btrfs]\n  Sep 07 11:55:32 debian9 kernel:  ? evict_inodes+0x166/0x1c0\n  Sep 07 11:55:32 debian9 kernel:  generic_shutdown_super+0x71/0x120\n  Sep 07 11:55:32 debian9 kernel:  kill_anon_super+0x14/0x30\n  Sep 07 11:55:32 debian9 kernel:  btrfs_kill_super+0x12/0x20 [btrfs]\n  Sep 07 11:55:32 debian9 kernel:  deactivate_locked_super+0x2e/0xa0\n  Sep 07 11:55:32 debian9 kernel:  cleanup_mnt+0x100/0x160\n  Sep 07 11:55:32 debian9 kernel:  task_work_run+0x59/0xa0\n  Sep 07 11:55:32 debian9 kernel:  exit_to_user_mode_prepare+0x1a6/0x1b0\n  Sep 07 11:55:32 debian9 kernel:  syscall_exit_to_user_mode+0x16/0x40\n  Sep 07 11:55:32 debian9 kernel:  do_syscall_64+0x48/0x90\n  Sep 07 11:55:32 debian9 kernel:  entry_SYSCALL_64_after_hwframe+0x63/0xcd\n  Sep 07 11:55:32 debian9 kernel: RIP: 0033:0x7fcde59a57a7\n  Sep 07 11:55:32 debian9 kernel: RSP: 002b:00007ffe914217c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6\n  Sep 07 11:55:32 debian9 kernel: RAX: 0000000000000000 RBX: 00007fcde5ae8264 RCX: 00007fcde59a57a7\n  Sep 07 11:55:32 debian9 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055b57556cdd0\n  Sep 07 11:55:32 debian9 kernel: RBP: 000055b57556cba0 R08: 0000000000000000 R09: 00007ffe91420570\n  Sep 07 11:55:32 debian9 kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\n  Sep 07 11:55:32 debian9 kernel: R13: 000055b57556cdd0 R14: 000055b57556ccb8 R15: 0000000000000000\n  Sep 07 11:55:32 debian9 kernel:  \u003c/TASK\u003e\n\nWhat happens is the following:\n\n1) The cleaner kthread tries to start a transaction to delete an unused\n   block group, but the metadata reservation can not be satisfied right\n   away, so a reservation ticket is created and it starts the async\n   metadata reclaim task (fs_info-\u003easync_reclaim_work);\n\n2) Writeback for all the filler inodes with an i_size of 2K starts\n   (generic/562 creates a lot of 2K files with the goal of filling\n   metadata space). We try to create an inline extent for them, but we\n   fail when trying to insert the inline extent with -ENOSPC (at\n   cow_file_range_inline()) - since this is not critical, we fallback\n   to non-inline mode (back to cow_file_range()), reserve extents\n---truncated---"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:20:28.733Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/6ac5b52e3f352f9cb270c89e6e1d4dadb564ddb8"
        },
        {
          "url": "https://git.kernel.org/stable/c/d8a76a2e514fbbb315a6dfff2d342de2de833994"
        },
        {
          "url": "https://git.kernel.org/stable/c/c338bea1fec5504290dc0acf026c9e7dba25004b"
        },
        {
          "url": "https://git.kernel.org/stable/c/a362bb864b8db4861977d00bd2c3222503ccc34b"
        }
      ],
      "title": "btrfs: fix hang during unmount when stopping a space reclaim worker",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48664",
    "datePublished": "2024-04-28T13:01:41.496Z",
    "dateReserved": "2024-02-25T13:44:28.320Z",
    "dateUpdated": "2026-05-23T15:20:28.733Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48879 (GCVE-0-2022-48879)

Vulnerability from cvelistv5 – Published: 2024-08-21 06:10 – Updated: 2026-05-23 15:21

Title

efi: fix NULL-deref in init error path

Summary

In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have been disabled, the runtime services workqueue will never have been allocated. Do not try to destroy the workqueue unconditionally in the unlikely event that EFI initialisation fails to avoid dereferencing a NULL pointer.

Severity

No CVSS data available.

Assigner

Linux

References

6 references

URL	Tags
https://git.kernel.org/stable/c/585a0b2b3ae7903c6…
https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9…
https://git.kernel.org/stable/c/4ca71bc0e1995d154…
https://git.kernel.org/stable/c/e2ea55564229e4bea…
https://git.kernel.org/stable/c/adc96d30f6503d30d…
https://git.kernel.org/stable/c/703c13fe3c9af557d…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 2ff3c97b47521d6700cc6485c7935908dcd2c27c , < 585a0b2b3ae7903c6abee3087d09c69e955a7794 (git) Affected: 5167f194da6947e19a3e970485ee3ccb44f7958d , < 5fcf75a8a4c3e7ee9122d143684083c9faf20452 (git) Affected: 98086df8b70c06234a8f4290c46064e44dafa0ed , < 4ca71bc0e1995d15486cd7b60845602a28399cb5 (git) Affected: 98086df8b70c06234a8f4290c46064e44dafa0ed , < e2ea55564229e4bea1474af15b111b3a3043b76f (git) Affected: 98086df8b70c06234a8f4290c46064e44dafa0ed , < adc96d30f6503d30dc68670c013716f1d9fcc747 (git) Affected: 98086df8b70c06234a8f4290c46064e44dafa0ed , < 703c13fe3c9af557d312f5895ed6a5fda2711104 (git) Affected: f591a42b8f9a9d20e01d0462f4f55d2176ac52ec (git) Affected: e6584124b9823151ef586d10dedf565ade50cea6 (git) Affected: 4.19.142 , < 4.19.270 (semver) Affected: 5.4.61 , < 5.4.229 (semver) Affected: 5.7.18 , < 5.8 (semver) Affected: 5.8.4 , < 5.9 (semver)
Linux	Linux	Affected: 5.9 Unaffected: 0 , < 5.9 (semver) Unaffected: 4.19.270 , ≤ 4.19.* (semver) Unaffected: 5.4.229 , ≤ 5.4.* (semver) Unaffected: 5.10.164 , ≤ 5.10.* (semver) Unaffected: 5.15.89 , ≤ 5.15.* (semver) Unaffected: 6.1.7 , ≤ 6.1.* (semver) Unaffected: 6.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48879",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:05:03.005794Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:32:51.607Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/efi/efi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "585a0b2b3ae7903c6abee3087d09c69e955a7794",
              "status": "affected",
              "version": "2ff3c97b47521d6700cc6485c7935908dcd2c27c",
              "versionType": "git"
            },
            {
              "lessThan": "5fcf75a8a4c3e7ee9122d143684083c9faf20452",
              "status": "affected",
              "version": "5167f194da6947e19a3e970485ee3ccb44f7958d",
              "versionType": "git"
            },
            {
              "lessThan": "4ca71bc0e1995d15486cd7b60845602a28399cb5",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "lessThan": "e2ea55564229e4bea1474af15b111b3a3043b76f",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "lessThan": "adc96d30f6503d30dc68670c013716f1d9fcc747",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "lessThan": "703c13fe3c9af557d312f5895ed6a5fda2711104",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f591a42b8f9a9d20e01d0462f4f55d2176ac52ec",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "e6584124b9823151ef586d10dedf565ade50cea6",
              "versionType": "git"
            },
            {
              "lessThan": "4.19.270",
              "status": "affected",
              "version": "4.19.142",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.229",
              "status": "affected",
              "version": "5.4.61",
              "versionType": "semver"
            },
            {
              "lessThan": "5.8",
              "status": "affected",
              "version": "5.7.18",
              "versionType": "semver"
            },
            {
              "lessThan": "5.9",
              "status": "affected",
              "version": "5.8.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/efi/efi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.9"
            },
            {
              "lessThan": "5.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.164",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.89",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "4.19.142",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "5.4.61",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.164",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.89",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.7",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.7.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.8.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: fix NULL-deref in init error path\n\nIn cases where runtime services are not supported or have been disabled,\nthe runtime services workqueue will never have been allocated.\n\nDo not try to destroy the workqueue unconditionally in the unlikely\nevent that EFI initialisation fails to avoid dereferencing a NULL\npointer."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:21:00.826Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794"
        },
        {
          "url": "https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452"
        },
        {
          "url": "https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5"
        },
        {
          "url": "https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f"
        },
        {
          "url": "https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747"
        },
        {
          "url": "https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104"
        }
      ],
      "title": "efi: fix NULL-deref in init error path",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48879",
    "datePublished": "2024-08-21T06:10:10.454Z",
    "dateReserved": "2024-07-16T11:38:08.923Z",
    "dateUpdated": "2026-05-23T15:21:00.826Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48946 (GCVE-0-2022-48946)

Vulnerability from cvelistv5 – Published: 2024-10-21 20:05 – Updated: 2026-05-11 18:50

Title

udf: Fix preallocation discarding at indirect extent boundary

Summary

In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udf_delete_aext() for deleting extent to avoid some code duplication.

Severity

No CVSS data available.

Assigner

Linux

References

9 references

URL	Tags
https://git.kernel.org/stable/c/c8b6fa4511a7900db…
https://git.kernel.org/stable/c/7665857f88557c372…
https://git.kernel.org/stable/c/72f651c96c8aadf08…
https://git.kernel.org/stable/c/4d835efd561dfb9bf…
https://git.kernel.org/stable/c/1a075f4a549481ce6…
https://git.kernel.org/stable/c/63dbbd8f1499b0a16…
https://git.kernel.org/stable/c/ae56d9a017724f130…
https://git.kernel.org/stable/c/12a88f572d6d94b5c…
https://git.kernel.org/stable/c/cfe4c1b25dd6d2f05…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 7665857f88557c372da35534165721156756f77f (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 72f651c96c8aadf087fd782d551bf7db648a8c2e (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 4d835efd561dfb9bf5409f11f4ecd428d5d29226 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 1a075f4a549481ce6e8518d8379f193ccec6b746 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 63dbbd8f1499b0a161e701a04aa50148d60bd1f7 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < ae56d9a017724f130cf1a263dd82a78d2a6e3852 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3 (git)
Linux	Linux	Affected: 2.6.12 Unaffected: 0 , < 2.6.12 (semver) Unaffected: 4.9.337 , ≤ 4.9.* (semver) Unaffected: 4.14.303 , ≤ 4.14.* (semver) Unaffected: 4.19.270 , ≤ 4.19.* (semver) Unaffected: 5.4.229 , ≤ 5.4.* (semver) Unaffected: 5.10.161 , ≤ 5.10.* (semver) Unaffected: 5.15.85 , ≤ 5.15.* (semver) Unaffected: 6.0.15 , ≤ 6.0.* (semver) Unaffected: 6.1.1 , ≤ 6.1.* (semver) Unaffected: 6.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48946",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:22:15.056500Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:28:41.431Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/udf/truncate.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "7665857f88557c372da35534165721156756f77f",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "72f651c96c8aadf087fd782d551bf7db648a8c2e",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "4d835efd561dfb9bf5409f11f4ecd428d5d29226",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "1a075f4a549481ce6e8518d8379f193ccec6b746",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "63dbbd8f1499b0a161e701a04aa50148d60bd1f7",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "ae56d9a017724f130cf1a263dd82a78d2a6e3852",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/udf/truncate.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.12"
            },
            {
              "lessThan": "2.6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.337",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.161",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.85",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.337",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.303",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.161",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.85",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.1",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Fix preallocation discarding at indirect extent boundary\n\nWhen preallocation extent is the first one in the extent block, the\ncode would corrupt extent tree header instead. Fix the problem and use\nudf_delete_aext() for deleting extent to avoid some code duplication."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:50:12.756Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c"
        },
        {
          "url": "https://git.kernel.org/stable/c/7665857f88557c372da35534165721156756f77f"
        },
        {
          "url": "https://git.kernel.org/stable/c/72f651c96c8aadf087fd782d551bf7db648a8c2e"
        },
        {
          "url": "https://git.kernel.org/stable/c/4d835efd561dfb9bf5409f11f4ecd428d5d29226"
        },
        {
          "url": "https://git.kernel.org/stable/c/1a075f4a549481ce6e8518d8379f193ccec6b746"
        },
        {
          "url": "https://git.kernel.org/stable/c/63dbbd8f1499b0a161e701a04aa50148d60bd1f7"
        },
        {
          "url": "https://git.kernel.org/stable/c/ae56d9a017724f130cf1a263dd82a78d2a6e3852"
        },
        {
          "url": "https://git.kernel.org/stable/c/12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf"
        },
        {
          "url": "https://git.kernel.org/stable/c/cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3"
        }
      ],
      "title": "udf: Fix preallocation discarding at indirect extent boundary",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48946",
    "datePublished": "2024-10-21T20:05:35.818Z",
    "dateReserved": "2024-08-22T01:27:53.624Z",
    "dateUpdated": "2026-05-11T18:50:12.756Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48947 (GCVE-0-2022-48947)

Vulnerability from cvelistv5 – Published: 2024-10-21 20:05 – Updated: 2026-05-11 18:50

Title

Bluetooth: L2CAP: Fix u8 overflow

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAP_CONF_REQ packets, chan->num_conf_rsp increases multiple times and eventually it will wrap around the maximum number (i.e., 255). This patch prevents this by adding a boundary check with L2CAP_MAX_CONF_RSP Btmon log: Bluetooth monitor ver 5.64 = Note: Linux version 6.1.0-rc2 (x86_64) 0.264594 = Note: Bluetooth subsystem version 2.22 0.264636 @ MGMT Open: btmon (privileged) version 1.22 {0x0001} 0.272191 = New Index: 00:00:00:00:00:00 (Primary,Virtual,hci0) [hci0] 13.877604 @ RAW Open: 9496 (privileged) version 2.22 {0x0002} 13.890741 = Open Index: 00:00:00:00:00:00 [hci0] 13.900426 (...) > ACL Data RX: Handle 200 flags 0x00 dlen 1033 #32 [hci0] 14.273106 invalid packet size (12 != 1033) 08 00 01 00 02 01 04 00 01 10 ff ff ............ > ACL Data RX: Handle 200 flags 0x00 dlen 1547 #33 [hci0] 14.273561 invalid packet size (14 != 1547) 0a 00 01 00 04 01 06 00 40 00 00 00 00 00 ........@..... > ACL Data RX: Handle 200 flags 0x00 dlen 2061 #34 [hci0] 14.274390 invalid packet size (16 != 2061) 0c 00 01 00 04 01 08 00 40 00 00 00 00 00 00 04 ........@....... > ACL Data RX: Handle 200 flags 0x00 dlen 2061 #35 [hci0] 14.274932 invalid packet size (16 != 2061) 0c 00 01 00 04 01 08 00 40 00 00 00 07 00 03 00 ........@....... = bluetoothd: Bluetooth daemon 5.43 14.401828 > ACL Data RX: Handle 200 flags 0x00 dlen 1033 #36 [hci0] 14.275753 invalid packet size (12 != 1033) 08 00 01 00 04 01 04 00 40 00 00 00 ........@...

Severity

No CVSS data available.

Assigner

Linux

References

8 references

URL	Tags
https://git.kernel.org/stable/c/49d5867819ab7c744…
https://git.kernel.org/stable/c/95f1847a361c7b4bf…
https://git.kernel.org/stable/c/ad528fde070290320…
https://git.kernel.org/stable/c/9fdc79b571434af7b…
https://git.kernel.org/stable/c/f3fe6817156a2ad4b…
https://git.kernel.org/stable/c/19a78143961a197de…
https://git.kernel.org/stable/c/5550bbf709c323194…
https://git.kernel.org/stable/c/bcd70260ef56e0aee…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < 49d5867819ab7c744852b45509e8469839c07e0e (git) Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < 95f1847a361c7b4bf7d74c06ecb6968455082c1a (git) Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < ad528fde0702903208d0a79d88d5a42ae3fc235b (git) Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < 9fdc79b571434af7bc742da40a3405f038b637a7 (git) Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < f3fe6817156a2ad4b06f01afab04638a34d7c9a6 (git) Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < 19a78143961a197de8502f4f29c453b913dc3c29 (git) Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < 5550bbf709c323194881737fd290c4bada9e6ead (git) Affected: f2fcfcd670257236ebf2088bbdf26f6a8ef459fe , < bcd70260ef56e0aee8a4fc6cd214a419900b0765 (git)
Linux	Linux	Affected: 2.6.32 Unaffected: 0 , < 2.6.32 (semver) Unaffected: 4.9.337 , ≤ 4.9.* (semver) Unaffected: 4.14.303 , ≤ 4.14.* (semver) Unaffected: 4.19.270 , ≤ 4.19.* (semver) Unaffected: 5.4.229 , ≤ 5.4.* (semver) Unaffected: 5.10.161 , ≤ 5.10.* (semver) Unaffected: 5.15.85 , ≤ 5.15.* (semver) Unaffected: 6.0.15 , ≤ 6.0.* (semver) Unaffected: 6.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48947",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:22:07.757358Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:28:41.276Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "49d5867819ab7c744852b45509e8469839c07e0e",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            },
            {
              "lessThan": "95f1847a361c7b4bf7d74c06ecb6968455082c1a",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            },
            {
              "lessThan": "ad528fde0702903208d0a79d88d5a42ae3fc235b",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            },
            {
              "lessThan": "9fdc79b571434af7bc742da40a3405f038b637a7",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            },
            {
              "lessThan": "f3fe6817156a2ad4b06f01afab04638a34d7c9a6",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            },
            {
              "lessThan": "19a78143961a197de8502f4f29c453b913dc3c29",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            },
            {
              "lessThan": "5550bbf709c323194881737fd290c4bada9e6ead",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            },
            {
              "lessThan": "bcd70260ef56e0aee8a4fc6cd214a419900b0765",
              "status": "affected",
              "version": "f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.32"
            },
            {
              "lessThan": "2.6.32",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.337",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.161",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.85",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.337",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.303",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.161",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.85",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix u8 overflow\n\nBy keep sending L2CAP_CONF_REQ packets, chan-\u003enum_conf_rsp increases\nmultiple times and eventually it will wrap around the maximum number\n(i.e., 255).\nThis patch prevents this by adding a boundary check with\nL2CAP_MAX_CONF_RSP\n\nBtmon log:\nBluetooth monitor ver 5.64\n= Note: Linux version 6.1.0-rc2 (x86_64)                               0.264594\n= Note: Bluetooth subsystem version 2.22                               0.264636\n@ MGMT Open: btmon (privileged) version 1.22                  {0x0001} 0.272191\n= New Index: 00:00:00:00:00:00 (Primary,Virtual,hci0)          [hci0] 13.877604\n@ RAW Open: 9496 (privileged) version 2.22                   {0x0002} 13.890741\n= Open Index: 00:00:00:00:00:00                                [hci0] 13.900426\n(...)\n\u003e ACL Data RX: Handle 200 flags 0x00 dlen 1033             #32 [hci0] 14.273106\n        invalid packet size (12 != 1033)\n        08 00 01 00 02 01 04 00 01 10 ff ff              ............\n\u003e ACL Data RX: Handle 200 flags 0x00 dlen 1547             #33 [hci0] 14.273561\n        invalid packet size (14 != 1547)\n        0a 00 01 00 04 01 06 00 40 00 00 00 00 00        ........@.....\n\u003e ACL Data RX: Handle 200 flags 0x00 dlen 2061             #34 [hci0] 14.274390\n        invalid packet size (16 != 2061)\n        0c 00 01 00 04 01 08 00 40 00 00 00 00 00 00 04  ........@.......\n\u003e ACL Data RX: Handle 200 flags 0x00 dlen 2061             #35 [hci0] 14.274932\n        invalid packet size (16 != 2061)\n        0c 00 01 00 04 01 08 00 40 00 00 00 07 00 03 00  ........@.......\n= bluetoothd: Bluetooth daemon 5.43                                   14.401828\n\u003e ACL Data RX: Handle 200 flags 0x00 dlen 1033             #36 [hci0] 14.275753\n        invalid packet size (12 != 1033)\n        08 00 01 00 04 01 04 00 40 00 00 00              ........@..."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:50:13.918Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/49d5867819ab7c744852b45509e8469839c07e0e"
        },
        {
          "url": "https://git.kernel.org/stable/c/95f1847a361c7b4bf7d74c06ecb6968455082c1a"
        },
        {
          "url": "https://git.kernel.org/stable/c/ad528fde0702903208d0a79d88d5a42ae3fc235b"
        },
        {
          "url": "https://git.kernel.org/stable/c/9fdc79b571434af7bc742da40a3405f038b637a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/f3fe6817156a2ad4b06f01afab04638a34d7c9a6"
        },
        {
          "url": "https://git.kernel.org/stable/c/19a78143961a197de8502f4f29c453b913dc3c29"
        },
        {
          "url": "https://git.kernel.org/stable/c/5550bbf709c323194881737fd290c4bada9e6ead"
        },
        {
          "url": "https://git.kernel.org/stable/c/bcd70260ef56e0aee8a4fc6cd214a419900b0765"
        }
      ],
      "title": "Bluetooth: L2CAP: Fix u8 overflow",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48947",
    "datePublished": "2024-10-21T20:05:36.491Z",
    "dateReserved": "2024-08-22T01:27:53.624Z",
    "dateUpdated": "2026-05-11T18:50:13.918Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48948 (GCVE-0-2022-48948)

Vulnerability from cvelistv5 – Published: 2024-10-21 20:05 – Updated: 2026-05-11 18:50

Title

usb: gadget: uvc: Prevent buffer overflow in setup handler

Summary

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler Setup function uvc_function_setup permits control transfer requests with up to 64 bytes of payload (UVC_MAX_REQUEST_SIZE), data stage handler for OUT transfer uses memcpy to copy req->actual bytes to uvc_event->data.data array of size 60. This may result in an overflow of 4 bytes.

Severity

No CVSS data available.

Assigner

Linux

References

9 references

URL	Tags
https://git.kernel.org/stable/c/4972e3528b968665b…
https://git.kernel.org/stable/c/06fd17ee92c8f1704…
https://git.kernel.org/stable/c/bc8380fe5768c564f…
https://git.kernel.org/stable/c/b8fb1cba934ea122b…
https://git.kernel.org/stable/c/c79538f32df12887f…
https://git.kernel.org/stable/c/6b41a35b41f77821d…
https://git.kernel.org/stable/c/7b1f773277a72f975…
https://git.kernel.org/stable/c/d1a92bb8d697f170d…
https://git.kernel.org/stable/c/4c92670b167273656…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < 4972e3528b968665b596b5434764ff8fd9446d35 (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < 06fd17ee92c8f1704c7e54ec0fd50ae0542a49a5 (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < bc8380fe5768c564f921f7b4eaba932e330b9e4b (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < b8fb1cba934ea122b50f13a4f9d6fc4fdc43d2be (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < c79538f32df12887f110dcd6b9c825b482905f24 (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < 6b41a35b41f77821db24f2d8f66794b390a585c5 (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < 7b1f773277a72f9756d47a41b94e43506cce1954 (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < d1a92bb8d697f170d93fe922da763d7d156b8841 (git) Affected: cdda479f15cd13fa50a913ca85129c0437cc7b91 , < 4c92670b16727365699fe4b19ed32013bab2c107 (git)
Linux	Linux	Affected: 2.6.35 Unaffected: 0 , < 2.6.35 (semver) Unaffected: 4.9.337 , ≤ 4.9.* (semver) Unaffected: 4.14.303 , ≤ 4.14.* (semver) Unaffected: 4.19.270 , ≤ 4.19.* (semver) Unaffected: 5.4.229 , ≤ 5.4.* (semver) Unaffected: 5.10.161 , ≤ 5.10.* (semver) Unaffected: 5.15.85 , ≤ 5.15.* (semver) Unaffected: 6.0.15 , ≤ 6.0.* (semver) Unaffected: 6.1.1 , ≤ 6.1.* (semver) Unaffected: 6.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48948",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:22:00.601644Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:28:41.126Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/gadget/function/f_uvc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4972e3528b968665b596b5434764ff8fd9446d35",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "06fd17ee92c8f1704c7e54ec0fd50ae0542a49a5",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "bc8380fe5768c564f921f7b4eaba932e330b9e4b",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "b8fb1cba934ea122b50f13a4f9d6fc4fdc43d2be",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "c79538f32df12887f110dcd6b9c825b482905f24",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "6b41a35b41f77821db24f2d8f66794b390a585c5",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "7b1f773277a72f9756d47a41b94e43506cce1954",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "d1a92bb8d697f170d93fe922da763d7d156b8841",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            },
            {
              "lessThan": "4c92670b16727365699fe4b19ed32013bab2c107",
              "status": "affected",
              "version": "cdda479f15cd13fa50a913ca85129c0437cc7b91",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/gadget/function/f_uvc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.35"
            },
            {
              "lessThan": "2.6.35",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.337",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.161",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.85",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.337",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.303",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.161",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.85",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.1",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: uvc: Prevent buffer overflow in setup handler\n\nSetup function uvc_function_setup permits control transfer\nrequests with up to 64 bytes of payload (UVC_MAX_REQUEST_SIZE),\ndata stage handler for OUT transfer uses memcpy to copy req-\u003eactual\nbytes to uvc_event-\u003edata.data array of size 60. This may result\nin an overflow of 4 bytes."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:50:15.125Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4972e3528b968665b596b5434764ff8fd9446d35"
        },
        {
          "url": "https://git.kernel.org/stable/c/06fd17ee92c8f1704c7e54ec0fd50ae0542a49a5"
        },
        {
          "url": "https://git.kernel.org/stable/c/bc8380fe5768c564f921f7b4eaba932e330b9e4b"
        },
        {
          "url": "https://git.kernel.org/stable/c/b8fb1cba934ea122b50f13a4f9d6fc4fdc43d2be"
        },
        {
          "url": "https://git.kernel.org/stable/c/c79538f32df12887f110dcd6b9c825b482905f24"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b41a35b41f77821db24f2d8f66794b390a585c5"
        },
        {
          "url": "https://git.kernel.org/stable/c/7b1f773277a72f9756d47a41b94e43506cce1954"
        },
        {
          "url": "https://git.kernel.org/stable/c/d1a92bb8d697f170d93fe922da763d7d156b8841"
        },
        {
          "url": "https://git.kernel.org/stable/c/4c92670b16727365699fe4b19ed32013bab2c107"
        }
      ],
      "title": "usb: gadget: uvc: Prevent buffer overflow in setup handler",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48948",
    "datePublished": "2024-10-21T20:05:37.122Z",
    "dateReserved": "2024-08-22T01:27:53.625Z",
    "dateUpdated": "2026-05-11T18:50:15.125Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48949 (GCVE-0-2022-48949)

Vulnerability from cvelistv5 – Published: 2024-10-21 20:05 – Updated: 2026-05-11 18:50

Title

igb: Initialize mailbox message for VF reset

Summary

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. The memory, however, is allocated from the stack meaning that information may be leaked to the VM. Initialize the message buffer to 0 so that no information is passed to the VM in this case.

Severity

No CVSS data available.

Assigner

Linux

References

8 references

URL	Tags
https://git.kernel.org/stable/c/a6629659af3f5c6a9…
https://git.kernel.org/stable/c/ef1d739dd1f362aec…
https://git.kernel.org/stable/c/c581439a977545d61…
https://git.kernel.org/stable/c/f2479c3daaabccbac…
https://git.kernel.org/stable/c/367e1e3399dbc56fc…
https://git.kernel.org/stable/c/51fd5ede7ed42f272…
https://git.kernel.org/stable/c/c383c7c35c7bc15e0…
https://git.kernel.org/stable/c/de5dc44370fbd6b46…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < a6629659af3f5c6a91e3914ea62554c975ab77f4 (git) Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < ef1d739dd1f362aec081278ff92f943c31eb177a (git) Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < c581439a977545d61849a72e8ed631cfc8a2a3c1 (git) Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < f2479c3daaabccbac6c343a737615d0c595c6dc4 (git) Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < 367e1e3399dbc56fc669740c4ab60e35da632b0e (git) Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < 51fd5ede7ed42f272682a0c33d6f0767b3484a3d (git) Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < c383c7c35c7bc15e07a04eefa060a8a80cbeae29 (git) Affected: 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 , < de5dc44370fbd6b46bd7f1a1e00369be54a041c8 (git)
Linux	Linux	Affected: 4.0 Unaffected: 0 , < 4.0 (semver) Unaffected: 4.14.303 , ≤ 4.14.* (semver) Unaffected: 4.19.270 , ≤ 4.19.* (semver) Unaffected: 5.4.229 , ≤ 5.4.* (semver) Unaffected: 5.10.161 , ≤ 5.10.* (semver) Unaffected: 5.15.85 , ≤ 5.15.* (semver) Unaffected: 6.0.15 , ≤ 6.0.* (semver) Unaffected: 6.1.1 , ≤ 6.1.* (semver) Unaffected: 6.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48949",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:21:53.220754Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:28:40.995Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/igb/igb_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a6629659af3f5c6a91e3914ea62554c975ab77f4",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            },
            {
              "lessThan": "ef1d739dd1f362aec081278ff92f943c31eb177a",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            },
            {
              "lessThan": "c581439a977545d61849a72e8ed631cfc8a2a3c1",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            },
            {
              "lessThan": "f2479c3daaabccbac6c343a737615d0c595c6dc4",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            },
            {
              "lessThan": "367e1e3399dbc56fc669740c4ab60e35da632b0e",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            },
            {
              "lessThan": "51fd5ede7ed42f272682a0c33d6f0767b3484a3d",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            },
            {
              "lessThan": "c383c7c35c7bc15e07a04eefa060a8a80cbeae29",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            },
            {
              "lessThan": "de5dc44370fbd6b46bd7f1a1e00369be54a041c8",
              "status": "affected",
              "version": "6ddbc4cf1f4d5a3a58b4223c80881f299dae3774",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/igb/igb_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.0"
            },
            {
              "lessThan": "4.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.161",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.85",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.303",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.161",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.85",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.1",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Initialize mailbox message for VF reset\n\nWhen a MAC address is not assigned to the VF, that portion of the message\nsent to the VF is not set. The memory, however, is allocated from the\nstack meaning that information may be leaked to the VM. Initialize the\nmessage buffer to 0 so that no information is passed to the VM in this\ncase."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:50:16.253Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a6629659af3f5c6a91e3914ea62554c975ab77f4"
        },
        {
          "url": "https://git.kernel.org/stable/c/ef1d739dd1f362aec081278ff92f943c31eb177a"
        },
        {
          "url": "https://git.kernel.org/stable/c/c581439a977545d61849a72e8ed631cfc8a2a3c1"
        },
        {
          "url": "https://git.kernel.org/stable/c/f2479c3daaabccbac6c343a737615d0c595c6dc4"
        },
        {
          "url": "https://git.kernel.org/stable/c/367e1e3399dbc56fc669740c4ab60e35da632b0e"
        },
        {
          "url": "https://git.kernel.org/stable/c/51fd5ede7ed42f272682a0c33d6f0767b3484a3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/c383c7c35c7bc15e07a04eefa060a8a80cbeae29"
        },
        {
          "url": "https://git.kernel.org/stable/c/de5dc44370fbd6b46bd7f1a1e00369be54a041c8"
        }
      ],
      "title": "igb: Initialize mailbox message for VF reset",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48949",
    "datePublished": "2024-10-21T20:05:37.782Z",
    "dateReserved": "2024-08-22T01:27:53.625Z",
    "dateUpdated": "2026-05-11T18:50:16.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2024-AVI-0999

Solutions

CVE-2021-47416 (GCVE-0-2021-47416)

CVE-2021-47534 (GCVE-0-2021-47534)

CVE-2022-3435 (GCVE-0-2022-3435)

CVE-2022-45934 (GCVE-0-2022-45934)

CVE-2022-48664 (GCVE-0-2022-48664)

CVE-2022-48879 (GCVE-0-2022-48879)

CVE-2022-48946 (GCVE-0-2022-48946)

CVE-2022-48947 (GCVE-0-2022-48947)

CVE-2022-48948 (GCVE-0-2022-48948)

CVE-2022-48949 (GCVE-0-2022-48949)

Tags

Sightings

Nomenclature