cbcvebase.
CVE-2022-49478
published 2025-02-26

CVE-2022-49478: In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init Syzbot reported that -1…

PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.29%
20.9th percentile
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init Syzbot reported that -1 is used as array index. The problem was in missing validation check. hdw->unit_number is initialized with -1 and then if init table walk fails this value remains unchanged. Since code blindly uses this member for array indexing adding sanity check is the easiest fix for that. hdw->workpoll initialization moved upper to prevent warning in __flush_work.

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < 4351bfe36aba9fa7dc9d68d498d25d41a0f45e674351bfe36aba9fa7dc9d68d498d25d41a0f45e67
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < 2e004fe914b243db41fa96f9e583385f360ea58e2e004fe914b243db41fa96f9e583385f360ea58e
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < a3660e06675bccec4bf149c7229ea1d491ba10d7a3660e06675bccec4bf149c7229ea1d491ba10d7
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < 1310fc3538dcc375a2f46ef0a438512c2ca328271310fc3538dcc375a2f46ef0a438512c2ca32827
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < a3304766d9384886e6d3092c776273526947a2e9a3304766d9384886e6d3092c776273526947a2e9
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < 3309c2c574e13b21b44729f5bdbf21f60189b79a3309c2c574e13b21b44729f5bdbf21f60189b79a
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < f99a8b1ec0eddc2931aeaa4f490277a15b39f511f99a8b1ec0eddc2931aeaa4f490277a15b39f511
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < 24e807541e4a9263ed928e6ae3498de3ad43bd1e24e807541e4a9263ed928e6ae3498de3ad43bd1e
linuxlinux>= d855497edbfbf9e19a17f4a1154bca69cb4bd9ba < 471bec68457aaf981add77b4f590d65dd7da1059471bec68457aaf981add77b4f590d65dd7da1059
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 2.6.18 < 4.9.3184.9.318
linuxlinux_kernel>= 4.10 < 4.14.2834.14.283
linuxlinux_kernel>= 4.15 < 4.19.2474.19.247
linuxlinux_kernel>= 4.20 < 5.4.1985.4.198
linuxlinux_kernel>= 5.11 < 5.15.465.15.46
linuxlinux_kernel>= 5.16 < 5.17.145.17.14
linuxlinux_kernel>= 5.18 < 5.18.35.18.3
linuxlinux_kernel>= 5.5 < 5.10.1215.10.121

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.