Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48777
HistoryJul 16, 2024 - 11:13 a.m.

CVE-2022-48777 mtd: parsers: qcom: Fix kernel panic on skipped partition

2024-07-1611:13:15
Linux
github.com
1
linux kernel
vulnerability
mtd parsers
qcom
kernel panic
skipped partition
parser logic

AI Score

6.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

mtd: parsers: qcom: Fix kernel panic on skipped partition

In the event of a skipped partition (case when the entry name is empty)
the kernel panics in the cleanup function as the name entry is NULL.
Rework the parser logic by first checking the real partition number and
then allocate the space and set the data for the valid partitions.

The logic was also fundamentally wrong as with a skipped partition, the
parts number returned was incorrect by not decreasing it for the skipped
partitions.

AI Score

6.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial