Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48804
HistoryJul 16, 2024 - 11:43 a.m.

CVE-2022-48804 vt_ioctl: fix array_index_nospec in vt_setactivate

2024-07-1611:43:56
Linux
github.com
2
linux kernel
vt_ioctl
array_index_nospec fix
vulnerability
kasper acknowledgements
vusec group

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

vt_ioctl: fix array_index_nospec in vt_setactivate

array_index_nospec ensures that an out-of-bounds value is set to zero
on the transient path. Decreasing the value by one afterwards causes
a transient integer underflow. vsa.console should be decreased first
and then sanitized with array_index_nospec.

Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh
Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU
Amsterdam.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial