Yüksek CVSS 7.8
CVE-2022-50142: Linux Kernel: sınır dışı yazma
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: intel_th: msu: Fix vmalloced buffers After commit f5ff79fddf0e ("dma-mapping: remove CONFIG_DMA_REMAP") there's a chance of DMA buffer getting allocated via vmalloc(), which messes up the mmapping code: > RIP: msc_mmap_fault [intel_th_msu] > Call Trace: > <TASK> > __do_fault > do_fault ... Fix this by accounting for vmalloc possibility.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,20 (yüzdelik 10)
- CWE
- CWE-787
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 5.2 | — | 5.4.211 |
| linux-linux-kernel | 5.5 | — | 5.10.137 |
| linux-linux-kernel | 5.11 | — | 5.15.61 |
| linux-linux-kernel | 5.16 | — | 5.18.18 |
| linux-linux-kernel | 5.19 | — | 5.19.2 |