CVE-2022-48751— Linux kernel 安全漏洞
Affected Version Matrix 10
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9< 38f0bdd548fd2ef5d481b88d8a2bfef968452e34 | affected |
fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9< 4284225cd8001e134f5cf533a7cd244bbb654d0f | affected | ||
fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9< c0bf3d8a943b6f2e912b7c1de03e2ef28e76f760 | affected | ||
d1d004585b40c212b338fc8a40cbaaf230ea4703 | affected | ||
4.19.299< 4.20 | affected | ||
5.1 | affected | ||
< 5.1 | unaffected | ||
5.15.19≤ 5.15.* | unaffected | ||
| … +2 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-48751の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
net/smc: Transitional solution for clcsock race issue
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smc_setsockopt() and it is caused by accessing smc->clcsock after clcsock was released. BUG: kernel NULL pointer dereference, address: 0000000000000020 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 50309 Comm: nginx Kdump: loaded Tainted: G E 5.16.0-rc4+ #53 RIP: 0010:smc_setsockopt+0x59/0x280 [smc] Call Trace: <TASK> __sys_setsockopt+0xfc/0x190 __x64_sys_setsockopt+0x20/0x30 do_syscall_64+0x34/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f16ba83918e </TASK> This patch tries to fix it by holding clcsock_release_lock and checking whether clcsock has already been released before access. In case that a crash of the same reason happens in smc_getsockopt() or smc_switch_to_fallback(), this patch also checkes smc->clcsock in them too. And the caller of smc_switch_to_fallback() will identify whether fallback succeeds according to the return value.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 net/smc 模块clcsock 竞争问题的过渡解决方案。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-48751の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-48751のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-48751 其他参考 (1)
Same Patch Batch · Linux · 2024-06-20 · 67 CVEs total
| CVE-2022-48750 | hwmon: (nct6775) Fix crash in clear_caseopen | |
| CVE-2022-48770 | bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() | |
| CVE-2022-48768 | tracing/histogram: Fix a potential memory leak for kstrdup() | |
| CVE-2022-48769 | efi: runtime: avoid EFIv2 runtime services on Apple x86 machines | |
| CVE-2022-48757 | net: fix information leakage in /proc/net/ptype | |
| CVE-2022-48756 | drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable | |
| CVE-2022-48755 | powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 | |
| CVE-2022-48754 | phylib: fix potential use-after-free | |
| CVE-2022-48753 | block: fix memory leak in disk_register_independent_access_ranges | |
| CVE-2022-48752 | powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending | |
| CVE-2022-48758 | scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() | |
| CVE-2022-48748 | net: bridge: vlan: fix memory leak in __allowed_ingress | |
| CVE-2022-48749 | drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc | |
| CVE-2022-48747 | block: Fix wrong offset in bio_truncate() | |
| CVE-2022-48745 | net/mlx5: Use del_timer_sync in fw reset flow of halting poll | |
| CVE-2022-48746 | net/mlx5e: Fix handling of wrong devices during bond netevent | |
| CVE-2022-48744 | net/mlx5e: Avoid field-overflowing memcpy() | |
| CVE-2022-48743 | net: amd-xgbe: Fix skb data length underflow | |
| CVE-2022-48742 | rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() | |
| CVE-2022-48741 | ovl: fix NULL pointer dereference in copy up warning |
Showing 20 of 67 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-53366
ipv4: account for fraggap on the paged allocation path - CVE-2026-53365
vsock/virtio: fix zerocopy completion for multi-skb sends - CVE-2026-53364
Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate - CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
同じベンダー: Linux
- CVE-2026-53366
ipv4: account for fraggap on the paged allocation path - CVE-2026-53365
vsock/virtio: fix zerocopy completion for multi-skb sends - CVE-2026-53364
Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate - CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
V. CVE-2022-48751へのコメント
まだコメントはありません