CVE-2022-48938

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Integer Overflow or Wraparound pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.

Rincian

Terbit di NVD

22 Agustus 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/49909c9f8458cacb5b241106cba65aba5a6d8f4c patch
• https://git.kernel.org/stable/c/69560efa001397ebb8dc1c3e6a3ce00302bb9f7f patch
• https://git.kernel.org/stable/c/7b737e47b87589031f0d4657f6d7b0b770474925 patch
• https://git.kernel.org/stable/c/8d2b1a1ec9f559d30b724877da4ce592edc41fdc patch
• https://git.kernel.org/stable/c/9957fbf34f52a4d8945d1bf39aae400ef9a11246
• https://git.kernel.org/stable/c/a612395c7631918e0e10ea48b9ce5ab4340f26a6