CVE-2022-48751— Linux kernel 安全漏洞
Affected Version Matrix 10
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9< 38f0bdd548fd2ef5d481b88d8a2bfef968452e34 | affected |
fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9< 4284225cd8001e134f5cf533a7cd244bbb654d0f | affected | ||
fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9< c0bf3d8a943b6f2e912b7c1de03e2ef28e76f760 | affected | ||
d1d004585b40c212b338fc8a40cbaaf230ea4703 | affected | ||
4.19.299< 4.20 | affected | ||
5.1 | affected | ||
< 5.1 | unaffected | ||
5.15.19≤ 5.15.* | unaffected | ||
| … +2 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-48751の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
net/smc: Transitional solution for clcsock race issue
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smc_setsockopt() and it is caused by accessing smc->clcsock after clcsock was released. BUG: kernel NULL pointer dereference, address: 0000000000000020 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 50309 Comm: nginx Kdump: loaded Tainted: G E 5.16.0-rc4+ #53 RIP: 0010:smc_setsockopt+0x59/0x280 [smc] Call Trace: <TASK> __sys_setsockopt+0xfc/0x190 __x64_sys_setsockopt+0x20/0x30 do_syscall_64+0x34/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f16ba83918e </TASK> This patch tries to fix it by holding clcsock_release_lock and checking whether clcsock has already been released before access. In case that a crash of the same reason happens in smc_getsockopt() or smc_switch_to_fallback(), this patch also checkes smc->clcsock in them too. And the caller of smc_switch_to_fallback() will identify whether fallback succeeds according to the return value.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 net/smc 模块clcsock 竞争问题的过渡解决方案。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-48751の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-48751のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-48751 其他参考 (1)
Same Patch Batch · Linux · 2024-06-20 · 67 CVEs total
| CVE-2022-48711 | 9.8 CRITICAL | tipc: improve size validations for received domain records |
| CVE-2024-38620 | 8.8 HIGH | Bluetooth: HCI: Remove HCI_AMP support |
| CVE-2021-47620 | 8.1 HIGH | Bluetooth: refactor malicious adv data check |
| CVE-2022-48743 | 8.1 HIGH | net: amd-xgbe: Fix skb data length underflow |
| CVE-2022-48733 | 7.8 HIGH | btrfs: fix use-after-free after failure to create a snapshot |
| CVE-2022-48771 | 7.8 HIGH | drm/vmwgfx: Fix stale file descriptors on failed usercopy |
| CVE-2022-48759 | 7.8 HIGH | rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev |
| CVE-2022-48729 | 7.8 HIGH | IB/hfi1: Fix panic with larger ipoib send_queue_size |
| CVE-2022-48716 | 7.8 HIGH | ASoC: codecs: wcd938x: fix incorrect used of portid |
| CVE-2022-48742 | 7.8 HIGH | rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() |
| CVE-2022-48726 | 7.8 HIGH | RDMA/ucma: Protect mc during concurrent multicast leaves |
| CVE-2022-48754 | 7.8 HIGH | phylib: fix potential use-after-free |
| CVE-2022-48720 | 7.8 HIGH | net: macsec: Fix offload support for NETDEV_UNREGISTER event |
| CVE-2022-48721 | 7.8 HIGH | net/smc: Forward wakeup to smc socket waitqueue after fallback |
| CVE-2022-48762 | 7.8 HIGH | arm64: extable: fix load_unaligned_zeropad() reg indices |
| CVE-2022-48735 | 7.8 HIGH | ALSA: hda: Fix UAF of leds class devs at unbinding |
| CVE-2022-48744 | 7.5 HIGH | net/mlx5e: Avoid field-overflowing memcpy() |
| CVE-2022-48727 | 7.3 HIGH | KVM: arm64: Avoid consuming a stale esr value when SError occur |
| CVE-2022-48717 | 7.1 HIGH | ASoC: max9759: fix underflow in speaker_gain_control_put() |
| CVE-2022-48739 | 7.1 HIGH | ASoC: hdmi-codec: Fix OOB memory accesses |
Showing 20 of 67 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
同じベンダー: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. CVE-2022-48751へのコメント
まだコメントはありません