PT-2022-7532 · Linux+3 · Linux Kernel+3

Aditya Garg · Published 2022-01-23 · Updated 2024-09-25 · CVE-2022-48769

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's use of EFIv2 runtime services on Apple x86 machines. A call to QueryVariableInfo(), which was added in EFI v2.00, can cause crashes in the firmware when using variable services at runtime. This is because Apple machines have only recently upgraded from EFI v1.10 to EFI v2.40 firmware, and Linux support for the newly introduced runtime services was added in 2011. QueryVariableInfo() is used to safely set variables, preventing machines with buggy firmwares from corrupting their NVRAMs when they run out of space.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-909

Related Identifiers

BDU:2024-07040

CVE-2022-48769

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:3189-1

SUSE-SU-2024:3251-1

SUSE-SU-2024:3252-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1423

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48769.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-48769 · Security Note
• https://git.kernel.org/stable/c/b0f1cc093bc2493ac259c53766fd2b800e085807 · Patch
• https://cve.org/CVERecord?id=CVE-2022-48769 · Security Note
• https://ubuntu.com/security/CVE-2022-48769 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2929-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a4085859411c825c321c9b55b8a9dc5a128a6684 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:3189-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3251-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f5390cd0b43c2e54c7cf5506c7da4a37c5cef746 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2394-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48769 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07040 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48769 · Vendor Advisory