PT-2022-7515 · Nvidia+3 · Geforce 2 Mx+3

Nick Lopez · Published 2022-01-31 · Updated 2024-08-22 · CVE-2022-48732

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an off-by-one error in BIOS boundary checking, which causes driver initialization to fail on certain systems, such as Apple eMac's with GeForce 2 MX GPUs, resulting in no working console. This problem is likely only seen on OpenFirmware machines like PowerPC Macs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-193

Related Identifiers

BDU:2024-06788

CVE-2022-48732

OESA-2024-1862

OPENSUSE-SU-2024_2362-1

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

OPENSUSE-SU-2024_2947-1

SUSE-SU-2024:2360-1

SUSE-SU-2024:2362-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2381-1

SUSE-SU-2024:2384-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2561-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2947-1

Affected Products

Astra Linux

Geforce 2 Mx

Red Os

Suse

References · 1423

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48732.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-39480 · Security Note
• https://git.kernel.org/stable/c/f071d9fa857582d7bd77f4906691f73d3edeab73 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2381-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2384-1 · Vendor Advisory
• https://git.kernel.org/stable/c/acc887ba88333f5fec49631f12d8cc7ebd95781c · Patch
• https://ubuntu.com/security/CVE-2022-48732 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2929-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38558 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39488 · Security Note
• https://git.kernel.org/stable/c/e7c36fa8a1e63b08312162179c78a0c7795ea369 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47598 · Security Note
• https://git.kernel.org/stable/c/1b777d4d9e383d2744fc9b3a09af6ec1893c8b1a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2394-1 · Vendor Advisory