CVE-2022-49078
published 2025-02-26CVE-2022-49078: In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4_decompress_safe_partial read out of bound When partialDecoding, it is EOF if…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.28%
20.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
lz4: fix LZ4_decompress_safe_partial read out of bound
When partialDecoding, it is EOF if we've either filled the output buffer
or can't proceed with reading an offset for following match.
In some extreme corner cases when compressed data is suitably corrupted,
UAF will occur. As reported by KASAN [1], LZ4_decompress_safe_partial
may lead to read out of bound problem during decoding. lz4 upstream has
fixed it [2] and this issue has been disscussed here [3] before.
current decompression routine was ported from lz4 v1.8.3, bumping
lib/lz4 to v1.9.+ is certainly a huge work to be done later, so, we'd
better fix it first.
[1] https://lore.kernel.org/all/[email protected]/
[2] https://github.com/lz4/lz4/commit/c5d6f8a8be3927c0bec91bcc58667a6cfad244ad#
[3] https://lore.kernel.org/all/[email protected]/
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2209fda323e2fd2a2d0885595fd5097717f8d2aa < 73953dfa9d50e5c9fe98ee13fd1d3427aa12a0a3 | 73953dfa9d50e5c9fe98ee13fd1d3427aa12a0a3 |
| linux | linux | >= 2209fda323e2fd2a2d0885595fd5097717f8d2aa < 6adc01a7aa37445dafe8846faa0610a86029b253 | 6adc01a7aa37445dafe8846faa0610a86029b253 |
| linux | linux | >= 2209fda323e2fd2a2d0885595fd5097717f8d2aa < 9fb8bc6cfc58773ce95414e11c9ccc8fc6ac4927 | 9fb8bc6cfc58773ce95414e11c9ccc8fc6ac4927 |
| linux | linux | >= 2209fda323e2fd2a2d0885595fd5097717f8d2aa < e64dbe97c05c769525cbca099ddbd22485630235 | e64dbe97c05c769525cbca099ddbd22485630235 |
| linux | linux | >= 2209fda323e2fd2a2d0885595fd5097717f8d2aa < 467d5e200ab4486b744fe1776154a43d1aa22d4b | 467d5e200ab4486b744fe1776154a43d1aa22d4b |
| linux | linux | >= 2209fda323e2fd2a2d0885595fd5097717f8d2aa < eafc0a02391b7b36617b36c97c4b5d6832cf5e24 | eafc0a02391b7b36617b36c97c4b5d6832cf5e24 |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 4.20 < 5.4.189 | 5.4.189 |
| linux | linux_kernel | >= 5.11 < 5.15.34 | 5.15.34 |
| linux | linux_kernel | >= 5.16 < 5.16.20 | 5.16.20 |
| linux | linux_kernel | >= 5.17 < 5.17.3 | 5.17.3 |
| linux | linux_kernel | >= 5.5 < 5.10.111 | 5.10.111 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jh3f-g934-rw77: In the Linux kernel, the following vulnerability has been resolved:
lz4: fix LZ4_decompress_safe_partial read out of bound
When partialDecoding, it
ghsa_unreviewed·2025-02-27
CVE-2022-49078 [HIGH] CWE-416 GHSA-jh3f-g934-rw77: In the Linux kernel, the following vulnerability has been resolved:
lz4: fix LZ4_decompress_safe_partial read out of bound
When partialDecoding, it
In the Linux kernel, the following vulnerability has been resolved:
lz4: fix LZ4_decompress_safe_partial read out of bound
When partialDecoding, it is EOF if we've either filled the output buffer
or can't proceed with reading an offset for following match.
In some extreme corner cases when compressed data is suitably corrupted,
UAF will occur. As reported by KASAN [1], LZ4_decompress_safe_partial
may lead to read out of bound problem during decoding. lz4 upstream has
fixed it [2] and this issue has been disscussed here [3] before.
current decompression routine was ported from lz4 v1.8.3, bumping
lib/lz4 to v1.9.+ is certainly a huge work to be done later, so, we'd
better fix it first.
[1] https://lore.kernel.org/all/[email protected]/
[2] https://github.com/lz4/l
OSV
CVE-2022-49078: In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4_decompress_safe_partial read out of bound When partialDecoding, it is
osv·2025-02-26·CVSS 7.8
CVE-2022-49078 [HIGH] CVE-2022-49078: In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4_decompress_safe_partial read out of bound When partialDecoding, it is
In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4_decompress_safe_partial read out of bound When partialDecoding, it is EOF if we've either filled the output buffer or can't proceed with reading an offset for following match. In some extreme corner cases when compressed data is suitably corrupted, UAF will occur. As reported by KASAN [1], LZ4_decompress_safe_partial may lead to read out of bound problem during decoding. lz4 upstream has fixed it [2] and this issue has been disscussed here [3] before. current decompression routine was ported from lz4 v1.8.3, bumping lib/lz4 to v1.9.+ is certainly a huge work to be done later, so, we'd better fix it first. [1] https://lore.kernel.org/all/[email protected]/ [2] https://github.com/lz4/lz4/co
Red Hat
kernel: lz4: fix LZ4_decompress_safe_partial read out of bound
vendor_redhat·2025-02-26·CVSS 7.8
CVE-2022-49078 [HIGH] kernel: lz4: fix LZ4_decompress_safe_partial read out of bound
kernel: lz4: fix LZ4_decompress_safe_partial read out of bound
In the Linux kernel, the following vulnerability has been resolved:
lz4: fix LZ4_decompress_safe_partial read out of bound
When partialDecoding, it is EOF if we've either filled the output buffer
or can't proceed with reading an offset for following match.
In some extreme corner cases when compressed data is suitably corrupted,
UAF will occur. As reported by KASAN [1], LZ4_decompress_safe_partial
may lead to read out of bound problem during decoding. lz4 upstream has
fixed it [2] and this issue has been disscussed here [3] before.
current decompression routine was ported from lz4 v1.8.3, bumping
lib/lz4 to v1.9.+ is certainly a huge work to be done later, so, we'd
better fix it first.
[1] https://lore.kernel.org/all/0000000000
Debian
CVE-2022-49078: linux - In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ...
vendor_debian·2022·CVSS 7.8
CVE-2022-49078 [HIGH] CVE-2022-49078: linux - In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ...
In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4_decompress_safe_partial read out of bound When partialDecoding, it is EOF if we've either filled the output buffer or can't proceed with reading an offset for following match. In some extreme corner cases when compressed data is suitably corrupted, UAF will occur. As reported by KASAN [1], LZ4_decompress_safe_partial may lead to read out of bound problem during decoding. lz4 upstream has fixed it [2] and this issue has been disscussed here [3] before. current decompression routine was ported from lz4 v1.8.3, bumping lib/lz4 to v1.9.+ is certainly a huge work to be done later, so, we'd better fix it first. [1] https://lore.kernel.org/all/[email protected]/ [2] https://github.com/lz4/lz4/co
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/467d5e200ab4486b744fe1776154a43d1aa22d4bhttps://git.kernel.org/stable/c/6adc01a7aa37445dafe8846faa0610a86029b253https://git.kernel.org/stable/c/73953dfa9d50e5c9fe98ee13fd1d3427aa12a0a3https://git.kernel.org/stable/c/9fb8bc6cfc58773ce95414e11c9ccc8fc6ac4927https://git.kernel.org/stable/c/e64dbe97c05c769525cbca099ddbd22485630235https://git.kernel.org/stable/c/eafc0a02391b7b36617b36c97c4b5d6832cf5e24
2025-02-26
Published