PT-2024-8456 · Linux+3 · Linux Kernel+3

Vladimir Oltean · Published 2022-09-20 · Updated 2025-09-18 · CVE-2022-48644

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is caused by an API design decision in the Linux kernel's net/sched component, specifically in the taprio qdisc. When attempting full offload, the taprio qdisc starts with invalid flags, which are then replaced with parsed flags from netlink. However, in the taprio destroy function, the taprio disable offload function is called based on the FULL OFFLOAD IS ENABLED macro, which performs a bitwise check on the flags. If the flags contain TAPRIO FLAGS INVALID, the macro will return true, leading to a potential kernel crash if user space forces an error between setting the flags and calling taprio enable offload. This is because drivers do not expect the offload to be disabled when it was never enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Improper Locking

Weakness Enumeration

CWE-476

CWE-667

Related Identifiers

BDU:2024-10016

CVE-2022-48644

OESA-2024-2080

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 603

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48644.json · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47292 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42305 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48898 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48644 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48686 · Security Note
• https://git.kernel.org/stable/c/c7c9c7eb305ab8b4e93e4e4e1b78d8cfcbc26323 · Patch
• https://bdu.fstec.ru/vul/2024-10016 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42284 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-48644 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48644 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48899 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48663 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48656 · Security Note