PT-2024-11804 · Linux+7 · Linux Kernel+7

Brian Johannesmeyer + 4 · Published 2022-01-27 · Updated 2025-09-29 · CVE-2022-48804

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the vt ioctl function, specifically the vt setactivate call, where the array index nospec mechanism fails to properly sanitize an out-of-bounds value, leading to a transient integer underflow. The vsa.console value should be decreased first and then sanitized with array index nospec to prevent this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-04353

CESA-2024_7000

CESA-2024_7001

CVE-2022-48804

INFSA-2024_7000

INFSA-2024_7001

INFSA-2024_9315

OESA-2024-1944

OPENSUSE-SU-2024_2947-1

RHSA-2024:10771

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024:9315

RHSA-2024_7000

RHSA-2024_7001

RHSA-2024_9315

RLSA-2024:7001

SUSE-SU-2024:2892-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2940-1

SUSE-SU-2024:2947-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

References · 1833

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48804.json · Exploit
• https://bdu.fstec.ru/vul/2025-04353 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-22386 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2901-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40978 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48804 · Security Note
• https://ubuntu.com/security/CVE-2022-48804 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48845 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39506 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48786 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47181 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39475 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48822 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40995 · Security Note