目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2022-48869— Linux kernel 安全漏洞

EPSS 0.02% · P4
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2022-48869の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
USB: gadgetfs: Fix race between mounting and unmounting
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: USB: gadgetfs: Fix race between mounting and unmounting The syzbot fuzzer and Gerald Lee have identified a use-after-free bug in the gadgetfs driver, involving processes concurrently mounting and unmounting the gadgetfs filesystem. In particular, gadgetfs_fill_super() can race with gadgetfs_kill_sb(), causing the latter to deallocate the_device while the former is using it. The output from KASAN says, in part: BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:102 [inline] BUG: KASAN: use-after-free in atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:176 [inline] BUG: KASAN: use-after-free in __refcount_sub_and_test include/linux/refcount.h:272 [inline] BUG: KASAN: use-after-free in __refcount_dec_and_test include/linux/refcount.h:315 [inline] BUG: KASAN: use-after-free in refcount_dec_and_test include/linux/refcount.h:333 [inline] BUG: KASAN: use-after-free in put_dev drivers/usb/gadget/legacy/inode.c:159 [inline] BUG: KASAN: use-after-free in gadgetfs_kill_sb+0x33/0x100 drivers/usb/gadget/legacy/inode.c:2086 Write of size 4 at addr ffff8880276d7840 by task syz-executor126/18689 CPU: 0 PID: 18689 Comm: syz-executor126 Not tainted 6.1.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: <TASK> ... atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:176 [inline] __refcount_sub_and_test include/linux/refcount.h:272 [inline] __refcount_dec_and_test include/linux/refcount.h:315 [inline] refcount_dec_and_test include/linux/refcount.h:333 [inline] put_dev drivers/usb/gadget/legacy/inode.c:159 [inline] gadgetfs_kill_sb+0x33/0x100 drivers/usb/gadget/legacy/inode.c:2086 deactivate_locked_super+0xa7/0xf0 fs/super.c:332 vfs_get_super fs/super.c:1190 [inline] get_tree_single+0xd0/0x160 fs/super.c:1207 vfs_get_tree+0x88/0x270 fs/super.c:1531 vfs_fsconfig_locked fs/fsopen.c:232 [inline] The simplest solution is to ensure that gadgetfs_fill_super() and gadgetfs_kill_sb() are serialized by making them both acquire a new mutex.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 USB 组件在gadgetfs文件系统中存在竞态条件问题。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux e5d82a7360d124ae1a38c2a5eac92ba49b125191 ~ 9a39f4626b361ee7aa10fd990401c37ec3b466ae -
LinuxLinux 5.3 -

II. CVE-2022-48869の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2022-48869のインテリジェンス情報

请登录查看更多情报信息。

Same Patch Batch · Linux · 2024-08-21 · 69 CVEs total

CVE-2022-48877f2fs: let's avoid panic if extent_tree is not created
CVE-2024-43874crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked
CVE-2024-43873vhost/vsock: always initialize seqpacket_allow
CVE-2024-43875PCI: endpoint: Clean up error handling in vpci_scan_bus()
CVE-2022-48871tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
CVE-2022-48872misc: fastrpc: Fix use-after-free race condition for maps
CVE-2022-48873misc: fastrpc: Don't remove map on creater_process and device_release
CVE-2022-48874misc: fastrpc: Fix use-after-free and race in fastrpc_map_find
CVE-2022-48875wifi: mac80211: sdata can be NULL during AMPDU start
CVE-2022-48876wifi: mac80211: fix initialization of rx->link and rx->link_sta
CVE-2022-48870tty: fix possible null-ptr-defer in spk_ttyio_release
CVE-2022-48878Bluetooth: hci_qca: Fix driver shutdown on closed serdev
CVE-2022-48879efi: fix NULL-deref in init error path
CVE-2022-48880platform/surface: aggregator: Add missing call to ssam_request_sync_free()
CVE-2022-48881platform/x86/amd: Fix refcount leak in amd_pmc_probe
CVE-2022-48882net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)
CVE-2022-48883net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent
CVE-2022-48884net/mlx5: Fix command stats access after free
CVE-2022-48885ice: Fix potential memory leak in ice_gnss_tty_write()
CVE-2022-48886ice: Add check for kzalloc

Showing 20 of 69 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2022-48869へのコメント

まだコメントはありません

コメントを残す