CVE-2022-48777
published 2024-07-16CVE-2022-48777: In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
13.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
mtd: parsers: qcom: Fix kernel panic on skipped partition
In the event of a skipped partition (case when the entry name is empty)
the kernel panics in the cleanup function as the name entry is NULL.
Rework the parser logic by first checking the real partition number and
then allocate the space and set the data for the valid partitions.
The logic was also fundamentally wrong as with a skipped partition, the
parts number returned was incorrect by not decreasing it for the skipped
partitions.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.11-1 (bookworm) | linux 5.16.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 803eb124e1a64e42888542c3444bfe6dac412c7f < eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 | eb03cb6e03ffd9173e18e5fe87e4e3ce83820453 |
| linux | linux | >= 803eb124e1a64e42888542c3444bfe6dac412c7f < a2995fe23095ceda2dc382fbe057f5e164595548 | a2995fe23095ceda2dc382fbe057f5e164595548 |
| linux | linux | >= 803eb124e1a64e42888542c3444bfe6dac412c7f < 65d003cca335cabc0160d3cd7daa689eaa9dd3cd | 65d003cca335cabc0160d3cd7daa689eaa9dd3cd |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 0 < 5.16.11-1 | 5.16.11-1 |
| linux | linux_kernel | >= 5.12 < 5.12.25 | 5.12.25 |
| linux | linux_kernel | >= 5.16 < 5.16.11 | 5.16.11 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-72v6-vmr5-v9qf: In the Linux kernel, the following vulnerability has been resolved:
mtd: parsers: qcom: Fix kernel panic on skipped partition
In the event of a skip
ghsa_unreviewed·2024-07-16
CVE-2022-48777 [MEDIUM] CWE-476 GHSA-72v6-vmr5-v9qf: In the Linux kernel, the following vulnerability has been resolved:
mtd: parsers: qcom: Fix kernel panic on skipped partition
In the event of a skip
In the Linux kernel, the following vulnerability has been resolved:
mtd: parsers: qcom: Fix kernel panic on skipped partition
In the event of a skipped partition (case when the entry name is empty)
the kernel panics in the cleanup function as the name entry is NULL.
Rework the parser logic by first checking the real partition number and
then allocate the space and set the data for the valid partitions.
The logic was also fundamentally wrong as with a skipped partition, the
parts number returned was incorrect by not decreasing it for the skipped
partitions.
OSV
CVE-2022-48777: In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skippe
osv·2024-07-16·CVSS 5.5
CVE-2022-48777 [MEDIUM] CVE-2022-48777: In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skippe
In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped partition (case when the entry name is empty) the kernel panics in the cleanup function as the name entry is NULL. Rework the parser logic by first checking the real partition number and then allocate the space and set the data for the valid partitions. The logic was also fundamentally wrong as with a skipped partition, the parts number returned was incorrect by not decreasing it for the skipped partitions.
Red Hat
kernel: mtd: parsers: qcom: Fix kernel panic on skipped partition
vendor_redhat·2024-07-16·CVSS 5.5
CVE-2022-48777 [MEDIUM] CWE-476 kernel: mtd: parsers: qcom: Fix kernel panic on skipped partition
kernel: mtd: parsers: qcom: Fix kernel panic on skipped partition
In the Linux kernel, the following vulnerability has been resolved:
mtd: parsers: qcom: Fix kernel panic on skipped partition
In the event of a skipped partition (case when the entry name is empty)
the kernel panics in the cleanup function as the name entry is NULL.
Rework the parser logic by first checking the real partition number and
then allocate the space and set the data for the valid partitions.
The logic was also fundamentally wrong as with a skipped partition, the
parts number returned was incorrect by not decreasing it for the skipped
partitions.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7)
Debian
CVE-2022-48777: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: parser...
vendor_debian·2022·CVSS 5.5
CVE-2022-48777 [MEDIUM] CVE-2022-48777: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: parser...
In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped partition (case when the entry name is empty) the kernel panics in the cleanup function as the name entry is NULL. Rework the parser logic by first checking the real partition number and then allocate the space and set the data for the valid partitions. The logic was also fundamentally wrong as with a skipped partition, the parts number returned was incorrect by not decreasing it for the skipped partitions.
Scope: local
bookworm: resolved (fixed in 5.16.11-1)
bullseye: resolved
forky: resolved (fixed in 5.16.11-1)
sid: resolved (fixed in 5.16.11-1)
trixie: resolved (fixed in 5.16.11-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cdhttps://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453https://git.kernel.org/stable/c/65d003cca335cabc0160d3cd7daa689eaa9dd3cdhttps://git.kernel.org/stable/c/a2995fe23095ceda2dc382fbe057f5e164595548https://git.kernel.org/stable/c/eb03cb6e03ffd9173e18e5fe87e4e3ce83820453
2024-07-16
Published