CVE-2022-48879 (GCVE-0-2022-48879)
Vulnerability from cvelistv5
Published
2024-08-21 06:10
Modified
2025-05-04 12:43
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have been disabled, the runtime services workqueue will never have been allocated. Do not try to destroy the workqueue unconditionally in the unlikely event that EFI initialisation fails to avoid dereferencing a NULL pointer.
Impacted products
Vendor Product Version
Linux Linux Version: 2ff3c97b47521d6700cc6485c7935908dcd2c27c
Version: 5167f194da6947e19a3e970485ee3ccb44f7958d
Version: 98086df8b70c06234a8f4290c46064e44dafa0ed
Version: 98086df8b70c06234a8f4290c46064e44dafa0ed
Version: 98086df8b70c06234a8f4290c46064e44dafa0ed
Version: 98086df8b70c06234a8f4290c46064e44dafa0ed
Version: f591a42b8f9a9d20e01d0462f4f55d2176ac52ec
Version: e6584124b9823151ef586d10dedf565ade50cea6
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48879",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:05:03.005794Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:32:51.607Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/efi/efi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "585a0b2b3ae7903c6abee3087d09c69e955a7794",
              "status": "affected",
              "version": "2ff3c97b47521d6700cc6485c7935908dcd2c27c",
              "versionType": "git"
            },
            {
              "lessThan": "5fcf75a8a4c3e7ee9122d143684083c9faf20452",
              "status": "affected",
              "version": "5167f194da6947e19a3e970485ee3ccb44f7958d",
              "versionType": "git"
            },
            {
              "lessThan": "4ca71bc0e1995d15486cd7b60845602a28399cb5",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "lessThan": "e2ea55564229e4bea1474af15b111b3a3043b76f",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "lessThan": "adc96d30f6503d30dc68670c013716f1d9fcc747",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "lessThan": "703c13fe3c9af557d312f5895ed6a5fda2711104",
              "status": "affected",
              "version": "98086df8b70c06234a8f4290c46064e44dafa0ed",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f591a42b8f9a9d20e01d0462f4f55d2176ac52ec",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "e6584124b9823151ef586d10dedf565ade50cea6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/efi/efi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.9"
            },
            {
              "lessThan": "5.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.164",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.89",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "4.19.142",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "5.4.61",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.164",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.89",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.7",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.7.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.8.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: fix NULL-deref in init error path\n\nIn cases where runtime services are not supported or have been disabled,\nthe runtime services workqueue will never have been allocated.\n\nDo not try to destroy the workqueue unconditionally in the unlikely\nevent that EFI initialisation fails to avoid dereferencing a NULL\npointer."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T12:43:57.666Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794"
        },
        {
          "url": "https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452"
        },
        {
          "url": "https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5"
        },
        {
          "url": "https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f"
        },
        {
          "url": "https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747"
        },
        {
          "url": "https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104"
        }
      ],
      "title": "efi: fix NULL-deref in init error path",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48879",
    "datePublished": "2024-08-21T06:10:10.454Z",
    "dateReserved": "2024-07-16T11:38:08.923Z",
    "dateUpdated": "2025-05-04T12:43:57.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.19.142\", \"versionEndExcluding\": \"4.19.270\", \"matchCriteriaId\": \"843ACA9C-4BFF-4EF1-A27D-0641A19FAF65\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.4.61\", \"versionEndExcluding\": \"5.4.229\", \"matchCriteriaId\": \"7133953F-C21D-45F4-951D-5FFE67BAF7C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.9\", \"versionEndExcluding\": \"5.10.164\", \"matchCriteriaId\": \"55D876B2-AC1A-44CD-BD2B-0E1D3EBBB963\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.89\", \"matchCriteriaId\": \"E706841F-E788-4316-9B05-DA8EB60CE6B3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.7\", \"matchCriteriaId\": \"9275C81F-AE96-4CDB-AD20-7DBD36E5D909\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nefi: fix NULL-deref in init error path\\n\\nIn cases where runtime services are not supported or have been disabled,\\nthe runtime services workqueue will never have been allocated.\\n\\nDo not try to destroy the workqueue unconditionally in the unlikely\\nevent that EFI initialisation fails to avoid dereferencing a NULL\\npointer.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: efi: corrige NULL-deref en la ruta de error de inicio En los casos en los que los servicios de ejecuci\\u00f3n no son compatibles o se han deshabilitado, la cola de trabajo de los servicios de ejecuci\\u00f3n nunca se habr\\u00e1 asignado. No intente destruir la cola de trabajo incondicionalmente en el improbable caso de que la inicializaci\\u00f3n de EFI no pueda evitar la desreferenciaci\\u00f3n de un puntero NULL.\"}]",
      "id": "CVE-2022-48879",
      "lastModified": "2024-08-29T02:39:34.370",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-08-21T07:15:04.690",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-48879\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-08-21T07:15:04.690\",\"lastModified\":\"2024-08-29T02:39:34.370\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nefi: fix NULL-deref in init error path\\n\\nIn cases where runtime services are not supported or have been disabled,\\nthe runtime services workqueue will never have been allocated.\\n\\nDo not try to destroy the workqueue unconditionally in the unlikely\\nevent that EFI initialisation fails to avoid dereferencing a NULL\\npointer.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: efi: corrige NULL-deref en la ruta de error de inicio En los casos en los que los servicios de ejecuci\u00f3n no son compatibles o se han deshabilitado, la cola de trabajo de los servicios de ejecuci\u00f3n nunca se habr\u00e1 asignado. No intente destruir la cola de trabajo incondicionalmente en el improbable caso de que la inicializaci\u00f3n de EFI no pueda evitar la desreferenciaci\u00f3n de un puntero NULL.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.142\",\"versionEndExcluding\":\"4.19.270\",\"matchCriteriaId\":\"843ACA9C-4BFF-4EF1-A27D-0641A19FAF65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4.61\",\"versionEndExcluding\":\"5.4.229\",\"matchCriteriaId\":\"7133953F-C21D-45F4-951D-5FFE67BAF7C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.9\",\"versionEndExcluding\":\"5.10.164\",\"matchCriteriaId\":\"55D876B2-AC1A-44CD-BD2B-0E1D3EBBB963\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.89\",\"matchCriteriaId\":\"E706841F-E788-4316-9B05-DA8EB60CE6B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.7\",\"matchCriteriaId\":\"9275C81F-AE96-4CDB-AD20-7DBD36E5D909\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-48879\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:05:03.005794Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:11.763Z\"}}], \"cna\": {\"title\": \"efi: fix NULL-deref in init error path\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2ff3c97b47521d6700cc6485c7935908dcd2c27c\", \"lessThan\": \"585a0b2b3ae7903c6abee3087d09c69e955a7794\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5167f194da6947e19a3e970485ee3ccb44f7958d\", \"lessThan\": \"5fcf75a8a4c3e7ee9122d143684083c9faf20452\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"98086df8b70c06234a8f4290c46064e44dafa0ed\", \"lessThan\": \"4ca71bc0e1995d15486cd7b60845602a28399cb5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"98086df8b70c06234a8f4290c46064e44dafa0ed\", \"lessThan\": \"e2ea55564229e4bea1474af15b111b3a3043b76f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"98086df8b70c06234a8f4290c46064e44dafa0ed\", \"lessThan\": \"adc96d30f6503d30dc68670c013716f1d9fcc747\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"98086df8b70c06234a8f4290c46064e44dafa0ed\", \"lessThan\": \"703c13fe3c9af557d312f5895ed6a5fda2711104\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f591a42b8f9a9d20e01d0462f4f55d2176ac52ec\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e6584124b9823151ef586d10dedf565ade50cea6\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/firmware/efi/efi.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.9\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.9\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.270\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.229\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.164\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.89\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.7\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.2\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/firmware/efi/efi.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794\"}, {\"url\": \"https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452\"}, {\"url\": \"https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5\"}, {\"url\": \"https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76f\"}, {\"url\": \"https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747\"}, {\"url\": \"https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nefi: fix NULL-deref in init error path\\n\\nIn cases where runtime services are not supported or have been disabled,\\nthe runtime services workqueue will never have been allocated.\\n\\nDo not try to destroy the workqueue unconditionally in the unlikely\\nevent that EFI initialisation fails to avoid dereferencing a NULL\\npointer.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.270\", \"versionStartIncluding\": \"4.19.142\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.229\", \"versionStartIncluding\": \"5.4.61\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.164\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.89\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.7.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.8.4\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T12:43:57.666Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-48879\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-04T12:43:57.666Z\", \"dateReserved\": \"2024-07-16T11:38:08.923Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-08-21T06:10:10.454Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}