CVE-2022-48648

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48648
In the Linux kernel, the following vulnerability has been resolved: sfc: fix null pointer dereference in efx_hard_start_xmit Trying to get the channel from the tx_queue variable here is wrong because we can only be here if tx_queue is NULL, so we shouldn't dereference it. As the above comment in the code says, this is very unlikely to happen, but it's wrong anyway so let's fix it. I hit this issue because of a different bug that caused tx_queue to be NULL. If that happens, this is the error message that we get here: BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [...] RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0a242eb2913a4aa3d6fbdb86559f27628e9466f3 Patch
https://git.kernel.org/stable/c/8547c7bfc0617e7184e4da65b9b96681fcfe9998 Patch
https://git.kernel.org/stable/c/b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7 Patch
https://git.kernel.org/stable/c/b3b952168ee1f220ba729fa100fd9d5aa752eb03 Patch
https://git.kernel.org/stable/c/0a242eb2913a4aa3d6fbdb86559f27628e9466f3 Patch
https://git.kernel.org/stable/c/8547c7bfc0617e7184e4da65b9b96681fcfe9998 Patch
https://git.kernel.org/stable/c/b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7 Patch
https://git.kernel.org/stable/c/b3b952168ee1f220ba729fa100fd9d5aa752eb03 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
History

14 Jan 2025, 14:52

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0a242eb2913a4aa3d6fbdb86559f27628e9466f3 - () https://git.kernel.org/stable/c/0a242eb2913a4aa3d6fbdb86559f27628e9466f3 - Patch
References () https://git.kernel.org/stable/c/8547c7bfc0617e7184e4da65b9b96681fcfe9998 - () https://git.kernel.org/stable/c/8547c7bfc0617e7184e4da65b9b96681fcfe9998 - Patch
References () https://git.kernel.org/stable/c/b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7 - () https://git.kernel.org/stable/c/b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7 - Patch
References () https://git.kernel.org/stable/c/b3b952168ee1f220ba729fa100fd9d5aa752eb03 - () https://git.kernel.org/stable/c/b3b952168ee1f220ba729fa100fd9d5aa752eb03 - Patch
First Time Linux linux Kernel
Linux
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 07:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0a242eb2913a4aa3d6fbdb86559f27628e9466f3 - () https://git.kernel.org/stable/c/0a242eb2913a4aa3d6fbdb86559f27628e9466f3 -
References () https://git.kernel.org/stable/c/8547c7bfc0617e7184e4da65b9b96681fcfe9998 - () https://git.kernel.org/stable/c/8547c7bfc0617e7184e4da65b9b96681fcfe9998 -
References () https://git.kernel.org/stable/c/b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7 - () https://git.kernel.org/stable/c/b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7 -
References () https://git.kernel.org/stable/c/b3b952168ee1f220ba729fa100fd9d5aa752eb03 - () https://git.kernel.org/stable/c/b3b952168ee1f220ba729fa100fd9d5aa752eb03 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sfc: corrige la desreferencia del puntero nulo en efx_hard_start_xmit Intentar obtener el canal de la variable tx_queue aquí es incorrecto porque solo podemos estar aquí si tx_queue es NULL, por lo que no debemos desreferenciarlo. Como dice el comentario anterior en el código, es muy poco probable que esto suceda, pero de todos modos está mal, así que solucionémoslo. Encontré este problema debido a un error diferente que provocó que tx_queue fuera NULL. Si eso sucede, este es el mensaje de error que recibimos aquí: ERROR: no se puede manejar la desreferencia del puntero NULL del kernel en 0000000000000020 [...] RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]

28 Apr 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-28 13:15

Updated : 2025-01-14 14:52

NVD link : CVE-2022-48648

Mitre link : CVE-2022-48648

CVE.ORG link : CVE-2022-48648

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference