CVE-2022-48696

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48696
In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read and max_raw_write limits in regmap_spi struct do not take into account the additional size of the transmitted register address and padding. This may result in exceeding the maximum permitted SPI message size, which could cause undefined behaviour, e.g. data corruption. Fix regmap_get_spi_bus() to properly adjust the above mentioned limits by reserving space for the register address/padding as set in the regmap configuration.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/15ff1f17847c19174b260bd7dd0de33edcebd45e Patch
https://git.kernel.org/stable/c/f5723cfc01932c7a8d5c78dbf7e067e537c91439 Patch
https://git.kernel.org/stable/c/15ff1f17847c19174b260bd7dd0de33edcebd45e Patch
https://git.kernel.org/stable/c/f5723cfc01932c7a8d5c78dbf7e067e537c91439 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
History

08 Apr 2025, 15:50

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/15ff1f17847c19174b260bd7dd0de33edcebd45e - () https://git.kernel.org/stable/c/15ff1f17847c19174b260bd7dd0de33edcebd45e - Patch
References () https://git.kernel.org/stable/c/f5723cfc01932c7a8d5c78dbf7e067e537c91439 - () https://git.kernel.org/stable/c/f5723cfc01932c7a8d5c78dbf7e067e537c91439 - Patch

21 Nov 2024, 07:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/15ff1f17847c19174b260bd7dd0de33edcebd45e - () https://git.kernel.org/stable/c/15ff1f17847c19174b260bd7dd0de33edcebd45e -
References () https://git.kernel.org/stable/c/f5723cfc01932c7a8d5c78dbf7e067e537c91439 - () https://git.kernel.org/stable/c/f5723cfc01932c7a8d5c78dbf7e067e537c91439 -

20 Nov 2024, 15:35

Type Values Removed Values Added
CWE CWE-120
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regmap: spi: reserva de espacio para dirección/relleno de registro Actualmente, los límites max_raw_read y max_raw_write en la estructura regmap_spi no tienen en cuenta el tamaño adicional de la dirección de registro transmitida y el relleno. Esto puede dar como resultado que se exceda el tamaño de mensaje SPI máximo permitido, lo que podría causar un comportamiento indefinido, por ejemplo, corrupción de datos. Corrija regmap_get_spi_bus() para ajustar adecuadamente los límites mencionados anteriormente reservando espacio para la dirección/relleno del registro como se establece en la configuración de regmap.

03 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 16:15

Updated : 2025-04-08 15:50

NVD link : CVE-2022-48696

Mitre link : CVE-2022-48696

CVE.ORG link : CVE-2022-48696

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')