PT-2024-11845 · Linux+3 · Linux Kernel+3

Radu Nicolae Pirea · Published 2022-12-08 · Updated 2025-02-11 · CVE-2022-48980

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an out-of-bounds access in the sja1105 init l2 policing() function. This function initializes L2 policers to prevent interference with normal packet reception. The problem arises when calculating the index of the multicast policer for the port, which is out of bounds for SJA1105 but in bounds for SJA1110. The code fails to properly handle this situation, leading to an out-of-bounds write that could potentially overwrite valid kernel data. The issue was detected using KASAN.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Improper Locking

Weakness Enumeration

CWE-787

CWE-667

Related Identifiers

BDU:2025-01682

CVE-2022-48980

OPENSUSE-SU-2024_3983-1

OPENSUSE-SU-2024_3985-1

SUSE-SU-2024:3983-1

SUSE-SU-2024:3985-1

SUSE-SU-2024:4364-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 972

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48980.json · Exploit
• https://ubuntu.com/security/CVE-2022-48980 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3985-1 · Vendor Advisory
• https://git.kernel.org/stable/c/5e88c6f4aaa70c542e59e5a9d2244bcc99cd245d · Patch
• https://osv.dev/vulnerability/CVE-2022-48980 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4364-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48980 · Security Note
• https://git.kernel.org/stable/c/f8bac7f9fdb0017b32157957ffffd490f95faa07 · Patch
• https://git.kernel.org/stable/c/147f3e3d84054117ae6b9bf317ec4fda9f991192 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48980 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48980 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48980 · Security Note
• https://bdu.fstec.ru/vul/2025-01682 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:3983-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48980 · Vendor Advisory