CVE-2022-49070— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于无设备的帧缓冲区注销时可能导致空指针取消引用。
可能的 ATT&CK 技术 1 AI
T1211 · Exploitation for Stealth影响版本矩阵 7
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | c894ac44786cfed383a6c6b20c1bfb12eb96018a< 2388f826cdc9af2651991adc0feb79de9bdf2232 |
affected |
9565a3b5203a4d57acbc1d0e981c6df71864b4ab< de33df481545974ba47c46f05194e769e4307843 |
affected | ||
4d695d7c276f15adb1d2b64c584c3cf8f4f9e9ce< feed87ff122b1640c221d4dd559442ab2cd50bb1 |
affected | ||
27599aacbaefcbf2af7b06b0029459bbf682000d< 0f525289ff0ddeb380813bd81e0f9bdaaa1c9078 |
affected | ||
5.15.33< 5.15.34 |
affected | ||
5.16.19< 5.16.20 |
affected | ||
5.17.2< 5.17.3 |
affected |
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2022-49070 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
fbdev: Fix unregistering of framebuffers without device
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix unregistering of framebuffers without device
OF framebuffers do not have an underlying device in the Linux
device hierarchy. Do a regular unregister call instead of hot
unplugging such a non-existing device. Fixes a NULL dereference.
An example error message on ppc64le is shown below.
BUG: Kernel NULL pointer dereference on read at 0x00000060
Faulting instruction address: 0xc00000000080dfa4
Oops: Kernel access of bad area, sig: 11 [#1]
LE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=2048 NUMA pSeries
[...]
CPU: 2 PID: 139 Comm: systemd-udevd Not tainted 5.17.0-ae085d7f9365 #1
NIP: c00000000080dfa4 LR: c00000000080df9c CTR: c000000000797430
REGS: c000000004132fe0 TRAP: 0300 Not tainted (5.17.0-ae085d7f9365)
MSR: 8000000002009033 <SF,VEC,EE,ME,IR,DR,RI,LE> CR: 28228282 XER: 20000000
CFAR: c00000000000c80c DAR: 0000000000000060 DSISR: 40000000 IRQMASK: 0
GPR00: c00000000080df9c c000000004133280 c00000000169d200 0000000000000029
GPR04: 00000000ffffefff c000000004132f90 c000000004132f88 0000000000000000
GPR08: c0000000015658f8 c0000000015cd200 c0000000014f57d0 0000000048228283
GPR12: 0000000000000000 c00000003fffe300 0000000020000000 0000000000000000
GPR16: 0000000000000000 0000000113fc4a40 0000000000000005 0000000113fcfb80
GPR20: 000001000f7283b0 0000000000000000 c000000000e4a588 c000000000e4a5b0
GPR24: 0000000000000001 00000000000a0000 c008000000db0168 c0000000021f6ec0
GPR28: c0000000016d65a8 c000000004b36460 0000000000000000 c0000000016d64b0
NIP [c00000000080dfa4] do_remove_conflicting_framebuffers+0x184/0x1d0
[c000000004133280] [c00000000080df9c] do_remove_conflicting_framebuffers+0x17c/0x1d0 (unreliable)
[c000000004133350] [c00000000080e4d0] remove_conflicting_framebuffers+0x60/0x150
[c0000000041333a0] [c00000000080e6f4] remove_conflicting_pci_framebuffers+0x134/0x1b0
[c000000004133450] [c008000000e70438] drm_aperture_remove_conflicting_pci_framebuffers+0x90/0x100 [drm]
[c000000004133490] [c008000000da0ce4] bochs_pci_probe+0x6c/0xa64 [bochs]
[...]
[c000000004133db0] [c00000000002aaa0] system_call_exception+0x170/0x2d0
[c000000004133e10] [c00000000000c3cc] system_call_common+0xec/0x250
The bug [1] was introduced by commit 27599aacbaef ("fbdev: Hot-unplug
firmware fb devices on forced removal"). Most firmware framebuffers
have an underlying platform device, which can be hot-unplugged
before loading the native graphics driver. OF framebuffers do not
(yet) have that device. Fix the code by unregistering the framebuffer
as before without a hot unplug.
Tested with 5.17 on qemu ppc64le emulation.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于无设备的帧缓冲区注销时可能导致空指针取消引用。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2022-49070 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2022-49070 的情报信息
请登录查看更多情报信息。
CVE-2022-49070 补丁与修复 (4)
同批安全公告 · Linux · 2025-02-26 · 共 706 条
| CVE-2022-49149 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49280 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49093 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49094 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49356 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49407 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49418 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49561 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49362 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49194 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49260 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49201 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49058 | 9.1 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2022-49328 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2022-49238 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2022-49471 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2022-49159 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2022-49500 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2022-49479 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2022-49519 | 8.8 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 706 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2022-49070
暂无评论