Lucene search

K
cveLinuxCVE-2022-48778
HistoryJul 16, 2024 - 12:15 p.m.

CVE-2022-48778

2024-07-1612:15:03
Linux
web.nvd.nist.gov
32
linux
kernel
gpmi
rawnand
vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

5.0%

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: gpmi: don’t leak PM reference in error path

If gpmi_nfc_apply_timings() fails, the PM runtime usage counter must be
dropped.

Affected configurations

Nvd
Vulners
Node
linuxlinux_kernelRange5.4.1745.4.181
OR
linuxlinux_kernelRange5.10.945.10.102
OR
linuxlinux_kernelRange5.15.175.15.25
OR
linuxlinux_kernelRange5.16.35.16.11
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c"
    ],
    "versions": [
      {
        "version": "29218853877a",
        "lessThan": "4cd3281a910a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "538a5e208e7d",
        "lessThan": "a4eeeaca5019",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0fe08bf9909f",
        "lessThan": "4a7ec50298b1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c447696e2f82",
        "lessThan": "58d3111eafce",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f53d4c109a66",
        "lessThan": "9161f365c916",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c"
    ],
    "versions": [
      {
        "version": "5.4.174",
        "lessThan": "5.4.181",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.10.94",
        "lessThan": "5.10.102",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.15.17",
        "lessThan": "5.15.25",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.16.3",
        "lessThan": "5.16.11",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

5.0%