CVE-2022-48627

2024-03-0222:15:46

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

cve-2022-48627

linux kernel

vulnerability

memory overlapping

fix

vt module

nvd

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

In the Linux kernel, the following vulnerability has been resolved:

vt: fix memory overlapping when deleting chars in the buffer

A memory overlapping copy occurs when deleting a long line. This memory
overlapping copy can cause data corruption when scr_memcpyw is optimized
to memcpy because memcpy does not ensure its behavior if the destination
buffer overlaps with the source buffer. The line buffer is not always
broken, because the memcpy utilizes the hardware acceleration, whose
result is not deterministic.

Fix this problem by using replacing the scr_memcpyw with scr_memmovew.

Affected configurations

Vulners

Node

linuxlinux_kernelRange3.7–4.19.312

linuxlinux_kernelRange4.20.0–5.4.274

linuxlinux_kernelRange5.5.0–5.10.132

linuxlinux_kernelRange5.11.0–5.15.56

linuxlinux_kernelRange5.16.0–5.18.13

linuxlinux_kernelRange5.19.0≥

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/tty/vt/vt.c"
    ],
    "versions": [
      {
        "version": "81732c3b2fed",
        "lessThan": "c8686c014b5e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "81732c3b2fed",
        "lessThan": "815be99d934e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "81732c3b2fed",
        "lessThan": "bfee93c9a6c3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "81732c3b2fed",
        "lessThan": "57964a571025",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "81732c3b2fed",
        "lessThan": "14d2cc21ca62",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "81732c3b2fed",
        "lessThan": "39cdb68c64d8",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/tty/vt/vt.c"
    ],
    "versions": [
      {
        "version": "3.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.7",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.312",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.274",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.132",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.56",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.18.13",
        "lessThanOrEqual": "5.18.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.19",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]