SECUFOCUSNOW
Home›CVE index›CVE-2022-48847
Review reviewHigh

CVE-2022-48847

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix filter limit check In watch_queue_set_filter(), there are a couple of places where we check that the filter type value does not exceed what the type_filter bitmap can hold. One place calculates the number of bits by: if (tf[i].type >= sizeof(wfilter->type_filter) * 8) which is fine, but the second does: if (tf[i].type >= sizeof(wfilter->type_filter) * BITS_PER_LONG) which is not. This can lead to a couple of out-of-bounds writes due to a too-large type: (1) __set_bit() on wfilter->type_filter (2) Writing mo...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.07.16
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix filter limit check In watch_queue_set_filter(), there are a couple of places where we check that the filter type value does not exceed what the type_filter bitmap can hold. One place calculates the number of bits by: if (tf[i].type >= sizeof(wfilter->type_filter) * 8) which is fine, but the second does: if (tf[i].type >= sizeof(wfilter->type_filter) * BITS_PER_LONG) which is not. This can lead to a couple of out-of-bounds writes due to a too-large type: (1) __set_bit() on wfilter->type_filter (2) Writing mo...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= c73be61cede5882f9605a852414db559c0ebedfd < 648895da69ced90ca770fd941c3d9479a9d72c16, >= c73be61cede5882f9605a852414db559c0ebedfd < 1b09f28f70a5046acd64138075ae3f095238b045, >= c73be61cede5882f9605a852414db559c0ebedfd < b36588ebbcef74583824c08352e75838d6fb4ff2, >= c73be61cede5882f9605a852414db559c0ebedfd < c993ee0f9f81caf5767a50d1faeba39a0dc82af2, >= 5.8, >= 5.8 < 5.10.106, >= 5.11 < 5.15.29, >= 5.16 < 5.16.15
Fixed versions
5.10.106, 5.15.29, 5.16.15

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-787