CVE-2022-48871

설명

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO (port->rx_fifo) based on default RX FIFO depth, e.g. 16. Later during serial startup the qcom_geni_serial_port_setup() updates the RX FIFO depth (port->rx_fifo_depth) to match real device capabilities, e.g. to 32. The RX UART handle code will read "port->rx_fifo_depth" number of words into "port->rx_fifo" buffer, thus exceeding the bounds. This can be observed in certain configurations with Qualcomm Bluetooth...

영향 제품·버전

제품 Linux Linux, linux kernel

영향 버전 Linux Linux, linux kernel >= f9d690b6ece7ec9a6ff6b588df95a010ab2d66f9 < 894681682dbefdad917b88f86cde1069140a047a, >= f9d690b6ece7ec9a6ff6b588df95a010ab2d66f9 < cb53a3366eb28fed67850c80afa52075bb71a38a, >= f9d690b6ece7ec9a6ff6b588df95a010ab2d66f9 < fd524ca7fe45b8a06dca2dd546d62684a9768f95, >= f9d690b6ece7ec9a6ff6b588df95a010ab2d66f9 < b8caf69a6946e18ffebad49847e258f5b6d52ac2, >= 5.7, >= 5.7 < 5.10.165, >= 5.11 < 5.15.90, >= 5.16 < 6.1.8

수정 버전 Linux Linux, linux kernel 5.10.165, 5.15.90, 6.1.8

기술 정보

CVSS 벡터 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE CWE-125