CVE-2022-48655

Katalog CVE

CVSS 7.8 · High EPSS 0,74%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada linux kernel, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to the reset domains Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave. Add an internal consistency check before any such domains descriptors accesses.

Rincian

Terbit di NVD

28 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,74% peluang dieksploitasi; lebih tinggi dari 53,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1f08a1b26cfc53b7715abc46857c6023bb1b87de patch
• https://git.kernel.org/stable/c/7184491fc515f391afba23d0e9b690caaea72daf patch
• https://git.kernel.org/stable/c/8e65edf0d37698f7a6cb174608d3ec7976baf49e patch
• https://git.kernel.org/stable/c/e9076ffbcaed5da6c182b144ef9f6e24554af268 patch
• https://git.kernel.org/stable/c/f2277d9e2a0d092c13bae7ee82d75432bb8b5108 patch
• https://security.netapp.com/advisory/ntap-20240912-0008/ advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html mailing list