CVE-2022-48672

Summary

In the Linux kernel, the following vulnerability has been resolved:

of: fdt: fix off-by-one error in unflatten_dt_nodes()

Commit 78c44d910d3e ("drivers/of: Fix depth when unflattening devicetree") forgot to fix up the depth check in the loop body in unflatten_dt_nodes() which makes it possible to overflow the nps[] buffer…

Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 < cbdda20ce363356698835185801a58a28f644853affected
LinuxLinux78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 < 2566706ac6393386a4e7c4ce23fe17f4c98d9aa0affected
LinuxLinux78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 < e0e88c25f88b9805572263c9ed20f1d88742feafaffected
LinuxLinux78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 < ee4369260e77821602102dcc7d792de39a56365caffected
LinuxLinux78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 < ba6b9f7cc1108bad6e2c53b1d6e0156379188db7affected
LinuxLinux78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 < 2133f451311671c7c42b5640d2b999326b39aa0eaffected
LinuxLinux78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 < 2f945a792f67815abca26fa8a5e863ccf3fa1181affected
LinuxLinux4.7affected
LinuxLinux0 < 4.7unaffected
LinuxLinux4.14.295 <= 4.14.*unaffected
LinuxLinux4.19.260 <= 4.19.*unaffected
LinuxLinux5.4.215 <= 5.4.*unaffected
LinuxLinux5.10.145 <= 5.10.*unaffected
LinuxLinux5.15.70 <= 5.15.*unaffected
LinuxLinux5.19.11 <= 5.19.*unaffected
LinuxLinux6.0 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References