CVE-2022-48864— Linux kernel 安全漏洞
Possible ATT&CK Techniques 2AI
T1068 · Exploitation for Privilege Escalation T1203 · Exploitation for Client ExecutionAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 52893733f2c5886fc74be6c386d12b59a3f581df< e7e118416465f2ba8b55007e5b789823e101421e | affected |
52893733f2c5886fc74be6c386d12b59a3f581df< 9f6effca75626c7a7c7620dabcb1a254ca530230 | affected | ||
52893733f2c5886fc74be6c386d12b59a3f581df< ed0f849fc3a63ed2ddf5e72cdb1de3bdbbb0f8eb | affected | ||
5.15 | affected | ||
< 5.15 | unaffected | ||
5.15.29≤ 5.15.* | unaffected | ||
5.16.15≤ 5.16.* | unaffected | ||
5.17≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-48864の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When control vq receives a VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command request from the driver, presently there is no validation against the number of queue pairs to configure, or even if multiqueue had been negotiated or not is unverified. This may lead to kernel panic due to uninitialized resource for the queues were there any bogus request sent down by untrusted driver. Tie up the loose ends there.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于vdpa/mlx5模块中发现验证问题。在处理VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET命令请求时，没有验证队列对的数量或多队列是否已协商。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-48864の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-48864のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-48864 其他参考 (3)
Same Patch Batch · Linux · 2024-07-16 · 98 CVEs total
| CVE-2022-48788 | 9.8 CRITICAL | nvme-rdma: fix possible use-after-free in transport error_recovery work |
| CVE-2022-48789 | 9.8 CRITICAL | nvme-tcp: fix possible use-after-free in transport error_recovery work |
| CVE-2022-48790 | 9.8 CRITICAL | nvme: fix a possible use-after-free in controller reset during load |
| CVE-2022-48851 | 9.8 CRITICAL | staging: gdm724x: fix use after free in gdm_lte_rx() |
| CVE-2022-48829 | 9.1 CRITICAL | NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes |
| CVE-2022-48828 | 9.1 CRITICAL | NFSD: Fix ia_size underflow |
| CVE-2022-48830 | 8.8 HIGH | can: isotp: fix potential CAN frame reception race in isotp_rcv() |
| CVE-2022-48785 | 8.8 HIGH | ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() |
| CVE-2022-48782 | 8.8 HIGH | mctp: fix use after free |
| CVE-2022-48796 | 7.8 HIGH | iommu: Fix potential use-after-free during probe |
| CVE-2022-48786 | 7.8 HIGH | vsock: remove vsock from connected table when connect is interrupted by a signal |
| CVE-2022-48791 | 7.8 HIGH | scsi: pm8001: Fix use-after-free for aborted TMF sas_task |
| CVE-2022-48792 | 7.8 HIGH | scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task |
| CVE-2024-41008 | 7.8 HIGH | drm/amdgpu: change vm->task_info handling |
| CVE-2022-48847 | 7.8 HIGH | watch_queue: Fix filter limit check |
| CVE-2022-48801 | 7.8 HIGH | iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL |
| CVE-2022-48839 | 7.8 HIGH | net/packet: fix slab-out-of-bounds access in packet_recvmsg() |
| CVE-2022-48816 | 7.8 HIGH | SUNRPC: lock against ->sock changing during sysfs read |
| CVE-2022-48821 | 7.8 HIGH | misc: fastrpc: avoid double fput() on failed usercopy |
| CVE-2022-48822 | 7.8 HIGH | usb: f_fs: Fix use-after-free for epfile |
Showing 20 of 98 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-68480
x86/bugs: Make Safe-RET robust against interrupt injection - CVE-2026-64604
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is - CVE-2026-64602
iio: adc: spear: Initialize completion before requesting IRQ - CVE-2026-64603
platform/x86: intel-hid: Protect ACPI notify handler against - CVE-2026-64601
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_
同じベンダー: Linux
- CVE-2026-68480
x86/bugs: Make Safe-RET robust against interrupt injection - CVE-2026-64604
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is - CVE-2026-64602
iio: adc: spear: Initialize completion before requesting IRQ - CVE-2026-64603
platform/x86: intel-hid: Protect ACPI notify handler against - CVE-2026-64601
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_
V. CVE-2022-48864へのコメント
まだコメントはありません