PT-2024-8446 · Linux+2 · Linux Kernel+2

Yuezhang Mo · Published 2022-09-04 · Updated 2024-11-07 · CVE-2022-48665

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the exfat component of the Linux kernel, where an overflow occurs when using the int type for the sector index in large capacity partitions. This can happen when the storage has a sector size of 512 bytes and the partition capacity exceeds 2TB. Additionally, there is a potential memory corruption issue in the exfat zeroed cluster() function, which could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Buffer Overflow

Weakness Enumeration

CWE-191

CWE-119

Related Identifiers

BDU:2024-10005

CVE-2022-48665

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48665.json · Exploit
• https://git.kernel.org/stable/c/17244f71765dfec39e84493993993e896c376d09 · Patch
• https://bdu.fstec.ru/vul/2024-10005 · Security Note
• https://git.kernel.org/stable/c/2e9ceb6728f1dc2fa4b5d08f37d88cbc49a20a62 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48665 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48665 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-48665 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48665 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48665 · Security Note
• https://ubuntu.com/security/CVE-2022-48665 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48665 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://git.kernel.org/linus/2e9ceb6728f1dc2fa4b5d08f37d88cbc49a20a62 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-0711241 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note