Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-48730HistoryJun 20, 2024 - 12:15 p.m.
CVE-2022-48730
2024-06-2012:15:11
Debian Security Bug Tracker
security-tracker.debian.org
cve-2022-48730
unix
dma-buf
spectre v1
In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix potential spectre v1 gadget It appears like nr could be a Spectre v1 gadget as it’s supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using array_index_nospec. [sumits: added fixes and cc: stable tags]
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 5.16.10-1 | linux_5.16.10-1_all.deb |
| Debian | 11 | all | linux | < 5.10.103-1 | linux_5.10.103-1_all.deb |
| Debian | 10 | all | linux | < 4.19.249-2 | linux_4.19.249-2_all.deb |
| Debian | 999 | all | linux | < 5.16.10-1 | linux_5.16.10-1_all.deb |
| Debian | 13 | all | linux | < 5.16.10-1 | linux_5.16.10-1_all.deb |
Related
cvelist
cvelist
CVE-2022-48730 dma-buf: heaps: Fix potential spectre v1 gadget
2024-06-20 11:13:18
nvd
nvd
CVE-2022-48730
2024-06-20 12:15:11
ubuntucve
ubuntucve
CVE-2022-48730
2024-06-20 00:00:00
redhatcve
redhatcve
CVE-2022-48730
2024-06-20 13:53:37
cve
cve
CVE-2022-48730
2024-06-20 12:15:11
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Related for DEBIANCVE:CVE-2022-48730