CVE-2022-48696
published 2024-05-03CVE-2022-48696: In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read and…
PriorityP427high7.1CVSS 3.1
AVLACLPRLUINSUCNIHAH
EPSS
0.20%
9.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
regmap: spi: Reserve space for register address/padding
Currently the max_raw_read and max_raw_write limits in regmap_spi struct
do not take into account the additional size of the transmitted register
address and padding. This may result in exceeding the maximum permitted
SPI message size, which could cause undefined behaviour, e.g. data
corruption.
Fix regmap_get_spi_bus() to properly adjust the above mentioned limits
by reserving space for the register address/padding as set in the regmap
configuration.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.19.11-1 (bookworm) | linux 5.19.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= f231ff38b7b23197013b437128d196710fe282da < 15ff1f17847c19174b260bd7dd0de33edcebd45e | 15ff1f17847c19174b260bd7dd0de33edcebd45e |
| linux | linux | >= f231ff38b7b23197013b437128d196710fe282da < f5723cfc01932c7a8d5c78dbf7e067e537c91439 | f5723cfc01932c7a8d5c78dbf7e067e537c91439 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.19.11-1 | 5.19.11-1 |
| linux | linux_kernel | >= 0 < 5.19.11-1 | 5.19.11-1 |
| linux | linux_kernel | >= 0 < 5.19.11-1 | 5.19.11-1 |
| linux | linux_kernel | >= 5.16 < 5.19.9 | 5.19.9 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: regmap: spi: Reserve space for register address/padding
vendor_redhat·2024-05-03·CVSS 5.5
CVE-2022-48696 [MEDIUM] kernel: regmap: spi: Reserve space for register address/padding
kernel: regmap: spi: Reserve space for register address/padding
In the Linux kernel, the following vulnerability has been resolved:
regmap: spi: Reserve space for register address/padding
Currently the max_raw_read and max_raw_write limits in regmap_spi struct
do not take into account the additional size of the transmitted register
address and padding. This may result in exceeding the maximum permitted
SPI message size, which could cause undefined behaviour, e.g. data
corruption.
Fix regmap_get_spi_bus() to properly adjust the above mentioned limits
by reserving space for the register address/padding as set in the regmap
configuration.
Statement: This issue is fixed in RHEL-9.2 and above (including RHEL-8.10):
~~~
in (rhel-9.2, rhel-9.3, rhel-9.4, rhel-9.5) regmap: spi: Reserve space for
Debian
CVE-2022-48696: linux - In the Linux kernel, the following vulnerability has been resolved: regmap: spi...
vendor_debian·2022·CVSS 5.5
CVE-2022-48696 [MEDIUM] CVE-2022-48696: linux - In the Linux kernel, the following vulnerability has been resolved: regmap: spi...
In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read and max_raw_write limits in regmap_spi struct do not take into account the additional size of the transmitted register address and padding. This may result in exceeding the maximum permitted SPI message size, which could cause undefined behaviour, e.g. data corruption. Fix regmap_get_spi_bus() to properly adjust the above mentioned limits by reserving space for the register address/padding as set in the regmap configuration.
Scope: local
bookworm: resolved (fixed in 5.19.11-1)
bullseye: resolved
forky: resolved (fixed in 5.19.11-1)
sid: resolved (fixed in 5.19.11-1)
trixie: resolved (fixed in 5.19.11-1)
GHSA
GHSA-2955-j2mm-qvcq: In the Linux kernel, the following vulnerability has been resolved:
regmap: spi: Reserve space for register address/padding
Currently the max_raw_re
ghsa_unreviewed·2024-05-03
CVE-2022-48696 [MEDIUM] CWE-120 GHSA-2955-j2mm-qvcq: In the Linux kernel, the following vulnerability has been resolved:
regmap: spi: Reserve space for register address/padding
Currently the max_raw_re
In the Linux kernel, the following vulnerability has been resolved:
regmap: spi: Reserve space for register address/padding
Currently the max_raw_read and max_raw_write limits in regmap_spi struct
do not take into account the additional size of the transmitted register
address and padding. This may result in exceeding the maximum permitted
SPI message size, which could cause undefined behaviour, e.g. data
corruption.
Fix regmap_get_spi_bus() to properly adjust the above mentioned limits
by reserving space for the register address/padding as set in the regmap
configuration.
OSV
CVE-2022-48696: In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read
osv·2024-05-03·CVSS 5.5
CVE-2022-48696 [MEDIUM] CVE-2022-48696: In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read
In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read and max_raw_write limits in regmap_spi struct do not take into account the additional size of the transmitted register address and padding. This may result in exceeding the maximum permitted SPI message size, which could cause undefined behaviour, e.g. data corruption. Fix regmap_get_spi_bus() to properly adjust the above mentioned limits by reserving space for the register address/padding as set in the regmap configuration.
No detection rules found.
No public exploits indexed.
2024-05-03
Published