PT-2022-7470 · Linux+3 · Linux Kernel+3

Syzbot · Published 2022-03-10 · Updated 2024-08-29 · CVE-2022-48855

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a kernel infoleak in the Linux kernel's SCTP sockets. The problem occurs when the inet sctp diag fill() function calls inet diag msg common fill(), and the r->idiag expires variable is not initialized. This can lead to a kernel infoleak of 4 bytes. The vulnerability is caused by the lack of initialization of the idiag timer, idiag retrans, and idiag expires variables, which can be filled again by the inet diag msg sctpasoc fill() function if needed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2024-06612

CVE-2022-48855

OESA-2024-1895

OPENSUSE-SU-2024_2947-1

SUSE-SU-2024:2892-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2940-1

SUSE-SU-2024:2947-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1384

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48855.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-40904 · Security Note
• https://git.kernel.org/stable/c/1502f15b9f29c41883a6139f2923523873282a83 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48855 · Vendor Advisory
• https://git.kernel.org/stable/c/d828b0fe6631f3ae8709ac9a10c77c5836c76a08 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-39499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48856 · Security Note
• https://git.kernel.org/stable/c/633593a808980f82d251d0ca89730d8bb8b0220c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-48775 · Security Note
• https://git.kernel.org/stable/c/3fc0fd724d199e061432b66a8d85b7d48fe485f7 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2892-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48788 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40941 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48855 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41007 · Security Note