PT-2022-7508 · Linux+1 · Linux Kernel+1

Nicolas Saenz Julienne · Published 2022-03-09 · Updated 2024-10-18 · CVE-2022-48848

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc6-next-20220307-nico+ #19

Description The issue is related to the tracing/osnoise component of the Linux kernel, where an attempt to unregister an unregistered tracepoint results in a kernel warning. This occurs when using the trace-cmd record command with specific options, which first stops tracing and then switches the tracer to nop. The osnoise tracer stops the workload when no trace instance is collecting data, and this can be caused by either disabling tracing or disabling the tracer itself. To avoid unregistering events twice, the existing trace osnoise callback enabled variable can be used to check if events and the workload are active before deactivating them.

Recommendations To resolve the issue, use the existing trace osnoise callback enabled variable to check if events and the workload are active before trying to deactivate them. As a temporary workaround, consider disabling the osnoise workload stop function until a patch is available. Restrict access to the vulnerable tracing set tracer function to minimize the risk of exploitation. Avoid using the tracepoint probe unregister function in the affected API endpoint until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-275

CWE-19

Related Identifiers

BDU:2024-06685

CVE-2022-48848

OESA-2024-2257

Affected Products

Linux Kernel

Red Os

References · 64

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48848.json · Exploit
• https://osv.dev/vulnerability/OESA-2024-2257 · Vendor Advisory
• https://git.kernel.org/stable/c/f0cfe17bcc1dd2f0872966b554a148e888833ee9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-46855 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46719 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46819 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52741 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52880 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46754 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48879 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52707 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46828 · Security Note
• https://git.kernel.org/stable/c/4e10787d18379d9b296290c2288097feddef16d4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48848 · Vendor Advisory