CVE-2022-48945

一、漏洞信息
 漏洞编号：[CVE-2022-48945](https://nvd.nist.gov/vuln/detail/CVE-2022-48945)
 漏洞归属组件：[kernel](https://gitee.com/euler-ttttt/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0
 CVSS V2.0分值：
  BaseScore：0.0 None
  Vector：CVSS：2.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:media: vivid: fix compose size exceed boundarysyzkaller found a bug: BUG: unable to handle page fault for address: ffffc9000a3b1000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 100000067 P4D 100000067 PUD 10015f067 PMD 1121ca067 PTE 0 Oops: 0002 [#1] PREEMPT SMP CPU: 0 PID: 23489 Comm: vivid-000-vid-c Not tainted 6.1.0-rc1+ #512 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 RIP: 0010:memcpy_erms+0x6/0x10[...] Call Trace:  <TASK>  ? tpg_fill_plane_buffer+0x856/0x15b0  vivid_fillbuff+0x8ac/0x1110  vivid_thread_vid_cap_tick+0x361/0xc90  vivid_thread_vid_cap+0x21a/0x3a0  kthread+0x143/0x180  ret_from_fork+0x1f/0x30  </TASK>This is because we forget to check boundary after adjust compose->heightint V4L2_SEL_TGT_CROP case. Add v4l2_rect_map_inside() to fix this problemfor this case.
 漏洞公开时间：2024-09-23 18:15:02
 漏洞创建时间：2024-09-27 22:22:00
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2022-48945
<details>
<summary>更多参考(点击展开)</summary>

无
</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the aaaaaa Linux kernel, the following vulnerability has been resolved:media: vivid: fix compose size exceed boundarysyzkaller found a bug:BUG: unable to handle page fault for address: ffffc9000a3b1000
 openEuler评分：
  3.9
 Vector：CVSS：3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
 受影响版本排查(受影响/不受影响)：
  1.master(6.6.0):受影响
2.openEuler-20.03-LTS-SP4(4.19.90):受影响
3.openEuler-22.03-LTS-SP1(5.10.0):受影响
4.openEuler-22.03-LTS-SP3(5.10.0):受影响
5.openEuler-24.03-LTS-Next(6.6.0):受影响
6.openEuler-22.03-LTS-SP4(5.10.0):不受影响
7.openEuler-24.03-LTS(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.6.0):是
2.openEuler-20.03-LTS-SP4(4.19.90):是
3.openEuler-22.03-LTS-SP1(5.10.0):是
4.openEuler-22.03-LTS-SP3(5.10.0):是
5.openEuler-24.03-LTS-Next(6.6.0):是
6.openEuler-22.03-LTS-SP4(5.10.0):否
7.openEuler-24.03-LTS(6.6.0):否

原因说明：
  1.openEuler-22.03-LTS-SP1(5.10.0):正常修复
2.openEuler-22.03-LTS-SP3(5.10.0):正常修复
3.openEuler-22.03-LTS-SP4(5.10.0):正常修复
4.master(6.6.0):暂不修复-上游无补丁
5.openEuler-20.03-LTS-SP4(4.19.90):暂不修复-上游无补丁
6.openEuler-24.03-LTS-Next(6.6.0):暂不修复-上游无补丁
7.openEuler-24.03-LTS(6.6.0):不受影响-漏洞代码不存在

euler-ttttt/kernel

内容风险标识

评论 (24)

euler-ttttt/kernel .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2022-48945

评论 (24)

搜索帮助

euler-ttttt/kernel