CVE-2022-48973— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 18
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | f942a7de047d8c599cc1a9a26293c8c7400450ea< 4749c5cc147c9860b96db1e71cc36d1de1bd3f59 | affected |
f942a7de047d8c599cc1a9a26293c8c7400450ea< 71d591ef873f9ebb86cd8d053b3caee785b2de6a | affected | ||
f942a7de047d8c599cc1a9a26293c8c7400450ea< b2bc053ebbba57a06fa655db5ea796de2edce445 | affected | ||
f942a7de047d8c599cc1a9a26293c8c7400450ea< 48bd5d3801f6b67cc144449d434abbd5043a6d37 | affected | ||
f942a7de047d8c599cc1a9a26293c8c7400450ea< 5ee6413d3dd972930af787b2c0c7aaeb379fa521 | affected | ||
f942a7de047d8c599cc1a9a26293c8c7400450ea< 4271515f189bd5fe2ec86b4089dab7cb804625d2 | affected | ||
f942a7de047d8c599cc1a9a26293c8c7400450ea< e364ce04d8f840478b09eee57b614de7cf1e743e | affected | ||
f942a7de047d8c599cc1a9a26293c8c7400450ea< 45fecdb9f658d9c82960c98240bc0770ade19aca | affected | ||
| … +10 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-48973の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
gpio: amd8111: Fix PCI device reference count leak
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. Add the missing pci_dev_put() after the 'out' label. Since pci_dev_put() can handle NULL input parameter, there is no problem for the 'Device not found' branch. For the normal path, add pci_dev_put() in amd_gpio_exit().
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在遍历PCI设备时未能正确处理引用计数，可能导致引用计数泄漏。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-48973の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-48973のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-48973 补丁与修复 (2)
Same Patch Batch · Linux · 2024-10-21 · 372 CVEs total
| CVE-2024-50017 | x86/mm/ident_map: Use gbpages only where full GB page should be mapped. | |
| CVE-2024-50028 | thermal: core: Reference count the zone in thermal_zone_get_by_id() | |
| CVE-2024-50029 | Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync | |
| CVE-2024-50027 | thermal: core: Free tzp copy along with the thermal zone | |
| CVE-2024-50025 | scsi: fnic: Move flush_work initialization out of if block | |
| CVE-2024-50026 | scsi: wd33c93: Don't use stale scsi_pointer value | |
| CVE-2024-50023 | net: phy: Remove LED entry from LEDs list on unregister | |
| CVE-2024-50024 | net: Fix an unsafe loop on the list | |
| CVE-2024-50022 | device-dax: correct pgoff align in dax_set_mapping() | |
| CVE-2024-50021 | ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() | |
| CVE-2024-50020 | ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() | |
| CVE-2024-50019 | kthread: unpark only parked kthread | |
| CVE-2024-50010 | exec: don't WARN for racy path_noexec check | |
| CVE-2024-50005 | mac802154: Fix potential RCU dereference issue in mac802154_scan_worker | |
| CVE-2024-50006 | ext4: fix i_data_sem unlock order in ext4_ind_migrate() | |
| CVE-2024-50007 | ALSA: asihpi: Fix potential OOB array access | |
| CVE-2024-50008 | wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() | |
| CVE-2024-50009 | cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value | |
| CVE-2024-50013 | exfat: fix memory leak in exfat_load_bitmap() | |
| CVE-2024-50015 | ext4: dax: fix overflowing extents beyond inode size when partially writing |
Showing 20 of 372 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-64186
iommu/amd: Remove latent out-of-bounds access in IOMMU debug - CVE-2026-64184
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() - CVE-2026-64185
sysfs: don't remove existing directory on update failure - CVE-2026-64183
efi: Allocate runtime workqueue before ACPI init - CVE-2026-64182
drivers/base/memory: fix memory block reference leak in pois
同じベンダー: Linux
- CVE-2026-64186
iommu/amd: Remove latent out-of-bounds access in IOMMU debug - CVE-2026-64184
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() - CVE-2026-64185
sysfs: don't remove existing directory on update failure - CVE-2026-64183
efi: Allocate runtime workqueue before ACPI init - CVE-2026-64182
drivers/base/memory: fix memory block reference leak in pois
V. CVE-2022-48973へのコメント
まだコメントはありません