CVE-2022-48869— Linux kernel 安全漏洞
影响版本矩阵 12
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | e5d82a7360d124ae1a38c2a5eac92ba49b125191< 9a39f4626b361ee7aa10fd990401c37ec3b466ae | affected |
e5d82a7360d124ae1a38c2a5eac92ba49b125191< 856e4b5e53f21edbd15d275dde62228dd94fb2b4 | affected | ||
e5d82a7360d124ae1a38c2a5eac92ba49b125191< a2e075f40122d8daf587db126c562a67abd69cf9 | affected | ||
e5d82a7360d124ae1a38c2a5eac92ba49b125191< 616fd34d017000ecf9097368b13d8a266f4920b3 | affected | ||
e5d82a7360d124ae1a38c2a5eac92ba49b125191< d18dcfe9860e842f394e37ba01ca9440ab2178f4 | affected | ||
5.3 | affected | ||
< 5.3 | unaffected | ||
5.4.230≤ 5.4.* | unaffected | ||
| … +4 条更多 | |||
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2022-48869 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
USB: gadgetfs: Fix race between mounting and unmounting
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: USB: gadgetfs: Fix race between mounting and unmounting The syzbot fuzzer and Gerald Lee have identified a use-after-free bug in the gadgetfs driver, involving processes concurrently mounting and unmounting the gadgetfs filesystem. In particular, gadgetfs_fill_super() can race with gadgetfs_kill_sb(), causing the latter to deallocate the_device while the former is using it. The output from KASAN says, in part: BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:102 [inline] BUG: KASAN: use-after-free in atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:176 [inline] BUG: KASAN: use-after-free in __refcount_sub_and_test include/linux/refcount.h:272 [inline] BUG: KASAN: use-after-free in __refcount_dec_and_test include/linux/refcount.h:315 [inline] BUG: KASAN: use-after-free in refcount_dec_and_test include/linux/refcount.h:333 [inline] BUG: KASAN: use-after-free in put_dev drivers/usb/gadget/legacy/inode.c:159 [inline] BUG: KASAN: use-after-free in gadgetfs_kill_sb+0x33/0x100 drivers/usb/gadget/legacy/inode.c:2086 Write of size 4 at addr ffff8880276d7840 by task syz-executor126/18689 CPU: 0 PID: 18689 Comm: syz-executor126 Not tainted 6.1.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: <TASK> ... atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:176 [inline] __refcount_sub_and_test include/linux/refcount.h:272 [inline] __refcount_dec_and_test include/linux/refcount.h:315 [inline] refcount_dec_and_test include/linux/refcount.h:333 [inline] put_dev drivers/usb/gadget/legacy/inode.c:159 [inline] gadgetfs_kill_sb+0x33/0x100 drivers/usb/gadget/legacy/inode.c:2086 deactivate_locked_super+0xa7/0xf0 fs/super.c:332 vfs_get_super fs/super.c:1190 [inline] get_tree_single+0xd0/0x160 fs/super.c:1207 vfs_get_tree+0x88/0x270 fs/super.c:1531 vfs_fsconfig_locked fs/fsopen.c:232 [inline] The simplest solution is to ensure that gadgetfs_fill_super() and gadgetfs_kill_sb() are serialized by making them both acquire a new mutex.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 USB 组件在gadgetfs文件系统中存在竞态条件问题。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2022-48869 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2022-48869 的情报信息
请登录查看更多情报信息。
CVE-2022-48869 其他参考 (5)
同批安全公告 · Linux · 2024-08-21 · 共 69 条
| CVE-2022-48877 | Linux kernel 安全漏洞 | |
| CVE-2024-43874 | Linux kernel 安全漏洞 | |
| CVE-2024-43873 | Linux kernel 安全漏洞 | |
| CVE-2024-43875 | Linux kernel 安全漏洞 | |
| CVE-2022-48871 | Linux kernel 安全漏洞 | |
| CVE-2022-48872 | Linux kernel 安全漏洞 | |
| CVE-2022-48873 | Linux kernel 安全漏洞 | |
| CVE-2022-48874 | Linux kernel 安全漏洞 | |
| CVE-2022-48875 | Linux kernel 安全漏洞 | |
| CVE-2022-48876 | Linux kernel 安全漏洞 | |
| CVE-2022-48870 | Linux kernel 安全漏洞 | |
| CVE-2022-48878 | Linux kernel 安全漏洞 | |
| CVE-2022-48879 | Linux kernel 安全漏洞 | |
| CVE-2022-48880 | Linux kernel 安全漏洞 | |
| CVE-2022-48881 | Linux kernel 安全漏洞 | |
| CVE-2022-48882 | Linux kernel 安全漏洞 | |
| CVE-2022-48883 | Linux kernel 安全漏洞 | |
| CVE-2022-48884 | Linux kernel 安全漏洞 | |
| CVE-2022-48885 | Linux kernel 安全漏洞 | |
| CVE-2022-48886 | Linux kernel 安全漏洞 |
显示前 20 条，共 69 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2022-48869
暂无评论