CVE-2022-48915
published 2024-08-22CVE-2022-48915: In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst() from…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
Do not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if
the thermal zone does not define one.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.14-1 (bookworm) | linux 5.16.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00 < 1c0b51e62a50e9291764d022ed44549e65d6ab9c | 1c0b51e62a50e9291764d022ed44549e65d6ab9c |
| linux | linux | >= 1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00 < 3dafbf915c05f83469e791949b5590da2aca2afb | 3dafbf915c05f83469e791949b5590da2aca2afb |
| linux | linux | >= 1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00 < 4c294285cec3964b3291772ac0642c2bf440bd1b | 4c294285cec3964b3291772ac0642c2bf440bd1b |
| linux | linux | >= 1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00 < 5838a14832d447990827d85e90afe17e6fb9c175 | 5838a14832d447990827d85e90afe17e6fb9c175 |
| linux | linux_kernel | >= 0 < 5.10.106-1 | 5.10.106-1 |
| linux | linux_kernel | >= 0 < 5.16.14-1 | 5.16.14-1 |
| linux | linux_kernel | >= 0 < 5.16.14-1 | 5.16.14-1 |
| linux | linux_kernel | >= 0 < 5.16.14-1 | 5.16.14-1 |
| linux | linux_kernel | >= 5.11 < 5.15.27 | 5.15.27 |
| linux | linux_kernel | >= 5.16 < 5.16.13 | 5.16.13 |
| linux | linux_kernel | >= 5.9 < 5.10.104 | 5.10.104 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-48915: In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst(
osv·2024-08-22·CVSS 5.5
CVE-2022-48915 [MEDIUM] CVE-2022-48915: In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst(
In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if the thermal zone does not define one.
GHSA
GHSA-6j9q-v6p5-9p93: In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
Do not call get_trip_hys
ghsa_unreviewed·2024-08-22
CVE-2022-48915 [MEDIUM] CWE-476 GHSA-6j9q-v6p5-9p93: In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
Do not call get_trip_hys
In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
Do not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if
the thermal zone does not define one.
Red Hat
kernel: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
vendor_redhat·2024-08-22·CVSS 5.5
CVE-2022-48915 [MEDIUM] CWE-476 kernel: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
kernel: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
Do not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if
the thermal zone does not define one.
Statement: This issue is fixed in RHEL-9.2 and above (including RHEL 8.10)
~~~
in (rhel-8.7, rhel-8.8, rhel-8.9, rhel-8.10) thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
in (rhel-9.2, rhel-9.3, rhel-9.4, rhel-9.5) thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
~~~
Please note that while RHEL-9 kernel-rt still appears as affected, it has been fixed in the same RHSA as RHEL-9 kernel. This is because from RHEL-9.3 onwards, the kernel and kernel-rt fixes are bundled together in a singl
Debian
CVE-2022-48915: linux - In the Linux kernel, the following vulnerability has been resolved: thermal: co...
vendor_debian·2022·CVSS 5.5
CVE-2022-48915 [MEDIUM] CVE-2022-48915: linux - In the Linux kernel, the following vulnerability has been resolved: thermal: co...
In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if the thermal zone does not define one.
Scope: local
bookworm: resolved (fixed in 5.16.14-1)
bullseye: resolved (fixed in 5.10.106-1)
forky: resolved (fixed in 5.16.14-1)
sid: resolved (fixed in 5.16.14-1)
trixie: resolved (fixed in 5.16.14-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-22
Published