PT-2025-8621 · Linux+3 · Linux Kernel+3
Marc Dionne
·
Publicado
2022-06-21
·
Atualizado
2025-04-14
·
CVE-2022-49688
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A issue in the Linux kernel has been resolved, related to the dynamic root getattr in the afs module. The problem occurred when the afs getattr function consulted the server without accounting for pseudo-inodes employed by the dynamic root-type afs superblock, which do not have a volume or server to access. This resulted in a kernel NULL pointer dereference when a directory in /afs was stat'd. The error manifested as an oops with a BUG message indicating a kernel NULL pointer dereference.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Red Hat
Suse