PT-2022-7630 · Linux+2 · Linux Kernel+2

Published 2022-02-24 · Updated 2024-09-19 · CVE-2022-48922

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc1-00233-g9a20c48d1ed2

Description The issue is related to the riscv component of the Linux kernel, where the trace hardirqs {on,off}() functions require the caller to set up the frame pointer properly. If the $fp register is used for another purpose, the code generated by the CALLER ADDR1 macro could trigger a memory access fault, leading to a kernel NULL pointer dereference. The problem arises because the $fp register is not used as a frame pointer in the assembly entry code.

Recommendations To resolve the issue, an extra level wrapper has been added for the trace hardirqs {on,off}() functions so they can be safely called by low-level entry code. As a temporary workaround, consider disabling the trace hardirqs {on,off}() functions until a patch is available. However, since the provided information does not specify the exact versions that are fixed, it is recommended to update to the latest version of the Linux kernel to ensure the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-07474

CVE-2022-48922

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48922.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-48922 · Security Note
• https://bdu.fstec.ru/vul/2024-07474 · Security Note
• https://git.kernel.org/stable/c/22e2100b1b07d6f5acc71cc1acb53f680c677d77 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48922 · Vendor Advisory
• https://git.kernel.org/stable/c/b5e180490db4af8c0f80c4b65ee482d333d0e8ee · Patch
• https://git.kernel.org/stable/c/1851b9a467065b18ec2cba156eea345206df1c8f · Patch
• https://git.kernel.org/stable/c/9e2dbc31e367d08ee299a0d8aeb498cb2e12a1c3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-48922 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48922 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48922 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48922 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48922 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://git.kernel.org/linus/22e2100b1b07d6f5acc71cc1acb53f680c677d77 · Note