Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-48967

UNKNOWN
Published 2024-10-21T20:05:49.740Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-48967. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

In the Linux kernel, the following vulnerability has been resolved:

NFC: nci: Bounds check struct nfc_target arrays

While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported:

memcpy: detected field-spanning write (size 129) of single field "target->sensf_res" at net/nfc/nci/ntf.c:260 (size 18)

This appears to be a legitimate lack of bounds checking in
nci_add_new_protocol(). Add the missing checks.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Linux

Linux

Affected Versions:

019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5
Linux

Linux

Affected Versions:

3.4 0 4.9.336 4.14.302 4.19.269 5.4.227 5.10.159 5.15.83 6.0.13 6.1

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-2645-7hqp-7qr7

Advisory Details

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported: memcpy: detected field-spanning write (size 129) of single field "target->sensf_res" at net/nfc/nci/ntf.c:260 (size 18) This appears to be a legitimate lack of bounds checking in nci_add_new_protocol(). Add the missing checks.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-48967
WEB https://git.kernel.org/stable/c/27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9
WEB https://git.kernel.org/stable/c/6778434706940b8fad7ef35f410d2b9929f256d2
WEB https://git.kernel.org/stable/c/6b37f0dc0638d13a006f2f24d2f6ca61e83bc714
WEB https://git.kernel.org/stable/c/908b2da426fe9c3ce74cf541ba40e7a4251db191
WEB https://git.kernel.org/stable/c/cff35329070b96b4484d23f9f48a5ca2c947e750
WEB https://git.kernel.org/stable/c/dbdcfb9f6748218a149f62468d6297ce3f014e9c
WEB https://git.kernel.org/stable/c/e329e71013c9b5a4535b099208493c7826ee4a64
WEB https://git.kernel.org/stable/c/f41547546db9af99da2c34e3368664d7a79cefae

Advisory provided by GitHub Security Advisory Database. Published: October 21, 2024, Modified: October 25, 2024

References

https://git.kernel.org/stable/c/6b37f0dc0638d13a006f2f24d2f6ca61e83bc714
https://git.kernel.org/stable/c/dbdcfb9f6748218a149f62468d6297ce3f014e9c
https://git.kernel.org/stable/c/cff35329070b96b4484d23f9f48a5ca2c947e750
https://git.kernel.org/stable/c/6778434706940b8fad7ef35f410d2b9929f256d2
https://git.kernel.org/stable/c/27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9
https://git.kernel.org/stable/c/908b2da426fe9c3ce74cf541ba40e7a4251db191
https://git.kernel.org/stable/c/f41547546db9af99da2c34e3368664d7a79cefae
https://git.kernel.org/stable/c/e329e71013c9b5a4535b099208493c7826ee4a64
Published: 2024-10-21T20:05:49.740Z
Last Modified: 2025-05-04T08:27:06.188Z
Copied to clipboard!