目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CVE-2022-48758— Linux kernel安全漏洞

AI Predicted 5.5 Difficulty: Moderate EPSS 0.21% · P12

Possible ATT&CK Techniques 1AI

T1083 · File and Directory Discovery

Affected Version Matrix 20

ベンダープロダクトVersion Rangeステータス
LinuxLinux0cbf32e1681d870632a1772601cbaadd996dc978< 2a12fe8248a38437b95b942bbe85aced72e6e2ebaffected
0cbf32e1681d870632a1772601cbaadd996dc978< 262550f29c750f7876b6ed1244281e72b64ebffbaffected
0cbf32e1681d870632a1772601cbaadd996dc978< c93a290c862ccfa404e42d7420565730d67cbff9affected
0cbf32e1681d870632a1772601cbaadd996dc978< de6336b17a1376db1c0f7a528cce8783db0881c0affected
0cbf32e1681d870632a1772601cbaadd996dc978< bf2bd892a0cb14dd2d21f2c658f4b747813be311affected
0cbf32e1681d870632a1772601cbaadd996dc978< 00849de10f798a9538242824a51b1756e7110754affected
0cbf32e1681d870632a1772601cbaadd996dc978< b11e34f7bab21df36f02a5e54fb69e858c09a65daffected
0cbf32e1681d870632a1772601cbaadd996dc978< ace7b6ef41251c5fe47f629a9a922382fb7b0a6baffected
… +12 more rows
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2022-48758の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() The bnx2fc_destroy() functions are removing the interface before calling destroy_work. This results multiple WARNings from sysfs_remove_group() as the controller rport device attributes are removed too early. Replace the fcoe_port's destroy_work queue. It's not needed. The problem is easily reproducible with the following steps. Example: $ dmesg -w & $ systemctl enable --now fcoe $ fipvlan -s -c ens2f1 $ fcoeadm -d ens2f1.802 [ 583.464488] host2: libfc: Link down on port (7500a1) [ 583.472651] bnx2fc: 7500a1 - rport not created Yet!! [ 583.490468] ------------[ cut here ]------------ [ 583.538725] sysfs group 'power' not found for kobject 'rport-2:0-0' [ 583.568814] WARNING: CPU: 3 PID: 192 at fs/sysfs/group.c:279 sysfs_remove_group+0x6f/0x80 [ 583.607130] Modules linked in: dm_service_time 8021q garp mrp stp llc bnx2fc cnic uio rpcsec_gss_krb5 auth_rpcgss nfsv4 ... [ 583.942994] CPU: 3 PID: 192 Comm: kworker/3:2 Kdump: loaded Not tainted 5.14.0-39.el9.x86_64 #1 [ 583.984105] Hardware name: HP ProLiant DL120 G7, BIOS J01 07/01/2013 [ 584.016535] Workqueue: fc_wq_2 fc_rport_final_delete [scsi_transport_fc] [ 584.050691] RIP: 0010:sysfs_remove_group+0x6f/0x80 [ 584.074725] Code: ff 5b 48 89 ef 5d 41 5c e9 ee c0 ff ff 48 89 ef e8 f6 b8 ff ff eb d1 49 8b 14 24 48 8b 33 48 c7 c7 ... [ 584.162586] RSP: 0018:ffffb567c15afdc0 EFLAGS: 00010282 [ 584.188225] RAX: 0000000000000000 RBX: ffffffff8eec4220 RCX: 0000000000000000 [ 584.221053] RDX: ffff8c1586ce84c0 RSI: ffff8c1586cd7cc0 RDI: ffff8c1586cd7cc0 [ 584.255089] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffb567c15afc00 [ 584.287954] R10: ffffb567c15afbf8 R11: ffffffff8fbe7f28 R12: ffff8c1486326400 [ 584.322356] R13: ffff8c1486326480 R14: ffff8c1483a4a000 R15: 0000000000000004 [ 584.355379] FS: 0000000000000000(0000) GS:ffff8c1586cc0000(0000) knlGS:0000000000000000 [ 584.394419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.421123] CR2: 00007fe95a6f7840 CR3: 0000000107674002 CR4: 00000000000606e0 [ 584.454888] Call Trace: [ 584.466108] device_del+0xb2/0x3e0 [ 584.481701] device_unregister+0x13/0x60 [ 584.501306] bsg_unregister_queue+0x5b/0x80 [ 584.522029] bsg_remove_queue+0x1c/0x40 [ 584.541884] fc_rport_final_delete+0xf3/0x1d0 [scsi_transport_fc] [ 584.573823] process_one_work+0x1e3/0x3b0 [ 584.592396] worker_thread+0x50/0x3b0 [ 584.609256] ? rescuer_thread+0x370/0x370 [ 584.628877] kthread+0x149/0x170 [ 584.643673] ? set_kthread_struct+0x40/0x40 [ 584.662909] ret_from_fork+0x22/0x30 [ 584.680002] ---[ end trace 53575ecefa942ece ]---
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 scsi:bnx2fc 模块没有在调用 bnx2fc_interface_put 之前刷新 destroy_work 队列。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux 0cbf32e1681d870632a1772601cbaadd996dc978 ~ 2a12fe8248a38437b95b942bbe85aced72e6e2eb -
LinuxLinux 3.2 -

II. CVE-2022-48758の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2022-48758のインテリジェンス情報

请登录查看更多情报信息。

CVE-2022-48758 其他参考 (9)

Same Patch Batch · Linux · 2024-06-20 · 67 CVEs total

CVE-2022-487119.8 CRITICALtipc: improve size validations for received domain records
CVE-2024-386208.8 HIGHBluetooth: HCI: Remove HCI_AMP support
CVE-2021-476208.1 HIGHBluetooth: refactor malicious adv data check
CVE-2022-487438.1 HIGHnet: amd-xgbe: Fix skb data length underflow
CVE-2022-487207.8 HIGHnet: macsec: Fix offload support for NETDEV_UNREGISTER event
CVE-2022-487517.8 HIGHnet/smc: Transitional solution for clcsock race issue
CVE-2022-487717.8 HIGHdrm/vmwgfx: Fix stale file descriptors on failed usercopy
CVE-2022-487167.8 HIGHASoC: codecs: wcd938x: fix incorrect used of portid
CVE-2022-487597.8 HIGHrpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
CVE-2022-487297.8 HIGHIB/hfi1: Fix panic with larger ipoib send_queue_size
CVE-2022-487337.8 HIGHbtrfs: fix use-after-free after failure to create a snapshot
CVE-2022-487427.8 HIGHrtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
CVE-2022-487217.8 HIGHnet/smc: Forward wakeup to smc socket waitqueue after fallback
CVE-2022-487547.8 HIGHphylib: fix potential use-after-free
CVE-2022-487627.8 HIGHarm64: extable: fix load_unaligned_zeropad() reg indices
CVE-2022-487357.8 HIGHALSA: hda: Fix UAF of leds class devs at unbinding
CVE-2022-487267.8 HIGHRDMA/ucma: Protect mc during concurrent multicast leaves
CVE-2022-487447.5 HIGHnet/mlx5e: Avoid field-overflowing memcpy()
CVE-2022-487277.3 HIGHKVM: arm64: Avoid consuming a stale esr value when SError occur
CVE-2022-487177.1 HIGHASoC: max9759: fix underflow in speaker_gain_control_put()

Showing 20 of 67 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2022-48758へのコメント

まだコメントはありません

コメントを残す