CVE-2022-48847

설명

In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix filter limit check In watch_queue_set_filter(), there are a couple of places where we check that the filter type value does not exceed what the type_filter bitmap can hold. One place calculates the number of bits by: if (tf[i].type >= sizeof(wfilter->type_filter) * 8) which is fine, but the second does: if (tf[i].type >= sizeof(wfilter->type_filter) * BITS_PER_LONG) which is not. This can lead to a couple of out-of-bounds writes due to a too-large type: (1) __set_bit() on wfilter->type_filter (2) Writing mo...

영향 제품·버전

제품 Linux Linux, linux kernel

영향 버전 Linux Linux, linux kernel >= c73be61cede5882f9605a852414db559c0ebedfd < 648895da69ced90ca770fd941c3d9479a9d72c16, >= c73be61cede5882f9605a852414db559c0ebedfd < 1b09f28f70a5046acd64138075ae3f095238b045, >= c73be61cede5882f9605a852414db559c0ebedfd < b36588ebbcef74583824c08352e75838d6fb4ff2, >= c73be61cede5882f9605a852414db559c0ebedfd < c993ee0f9f81caf5767a50d1faeba39a0dc82af2, >= 5.8, >= 5.8 < 5.10.106, >= 5.11 < 5.15.29, >= 5.16 < 5.16.15

수정 버전 Linux Linux, linux kernel 5.10.106, 5.15.29, 5.16.15

기술 정보

CVSS 벡터 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE CWE-787