Lucene search

LinuxCVE-2022-48732

HistoryJun 20, 2024 - 12:15 p.m.

CVE-2022-48732

2024-06-2012:15:11

CWE-193

Linux

web.nvd.nist.gov

linux kernel

vulnerability

bios boundary checking

fix

off by one

nouveau

powerpc macs

openfirmware

apple emac

geforce 2 mx

gpu

console

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.4

Confidence

Low

EPSS

Percentile

5.0%

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau: fix off by one in BIOS boundary checking

Bounds checking when parsing init scripts embedded in the BIOS reject
access to the last byte. This causes driver initialization to fail on
Apple eMac’s with GeForce 2 MX GPUs, leaving the system with no working
console.

This is probably only seen on OpenFirmware machines like PowerPC Macs
because the BIOS image provided by OF is only the used parts of the ROM,
not a power-of-two blocks read from PCI directly so PCs always have
empty bytes at the end that are never accessed.

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelRange4.8–4.9.300

linuxlinux_kernelRange4.10–4.14.265

linuxlinux_kernelRange4.15–4.19.228

linuxlinux_kernelRange4.20–5.4.178

linuxlinux_kernelRange5.5–5.10.99

linuxlinux_kernelRange5.11–5.15.22

linuxlinux_kernelRange5.16–5.16.8

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
    ],
    "versions": [
      {
        "version": "4d4e9907ff57",
        "lessThan": "d4b746e60fd8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4d4e9907ff57",
        "lessThan": "909d3ec1bf9f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4d4e9907ff57",
        "lessThan": "b2a21669ee98",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4d4e9907ff57",
        "lessThan": "acc887ba8833",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4d4e9907ff57",
        "lessThan": "f071d9fa8575",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4d4e9907ff57",
        "lessThan": "d877e814a62b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4d4e9907ff57",
        "lessThan": "e7c36fa8a1e6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4d4e9907ff57",
        "lessThan": "1b777d4d9e38",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
    ],
    "versions": [
      {
        "version": "4.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.8",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.9.300",
        "lessThanOrEqual": "4.9.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.14.265",
        "lessThanOrEqual": "4.14.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.228",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.178",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.99",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.22",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.16.8",
        "lessThanOrEqual": "5.16.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]