CVE-2022-48655

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48655
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to the reset domains Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave. Add an internal consistency check before any such domains descriptors accesses.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1f08a1b26cfc53b7715abc46857c6023bb1b87de Patch
https://git.kernel.org/stable/c/7184491fc515f391afba23d0e9b690caaea72daf
https://git.kernel.org/stable/c/8e65edf0d37698f7a6cb174608d3ec7976baf49e Patch
https://git.kernel.org/stable/c/e9076ffbcaed5da6c182b144ef9f6e24554af268 Patch
https://git.kernel.org/stable/c/f2277d9e2a0d092c13bae7ee82d75432bb8b5108
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 May 2024, 15:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7184491fc515f391afba23d0e9b690caaea72daf -
  • () https://git.kernel.org/stable/c/f2277d9e2a0d092c13bae7ee82d75432bb8b5108 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: arm_scmi: Refuerza los accesos a los dominios de reinicio. El acceso a los descriptores de dominios de reinicio por el índice ante las solicitudes de los controladores SCMI a través de la interfaz de operaciones de reinicio de SCMI puede conducir potencialmente a violaciones fuera de los límites. si el controlador SCMI se comporta mal. Agregue una verificación de coherencia interna antes de que se acceda a dichos descriptores de dominio.

30 Apr 2024, 15:25

Type Values Removed Values Added
CWE CWE-119
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/1f08a1b26cfc53b7715abc46857c6023bb1b87de - () https://git.kernel.org/stable/c/1f08a1b26cfc53b7715abc46857c6023bb1b87de - Patch
References () https://git.kernel.org/stable/c/8e65edf0d37698f7a6cb174608d3ec7976baf49e - () https://git.kernel.org/stable/c/8e65edf0d37698f7a6cb174608d3ec7976baf49e - Patch
References () https://git.kernel.org/stable/c/e9076ffbcaed5da6c182b144ef9f6e24554af268 - () https://git.kernel.org/stable/c/e9076ffbcaed5da6c182b144ef9f6e24554af268 - Patch

28 Apr 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-28 13:15

Updated : 2024-05-25 15:15

NVD link : CVE-2022-48655

Mitre link : CVE-2022-48655

CVE.ORG link : CVE-2022-48655

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer