In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() task_pt_regs() can return NULL on powerpc for kernel threads. This is then used in __bpf_get_stack() to check for user mode, resulting in a kernel oops. Guard against this by checking return value of task_pt_regs() before trying to obtain the call chain.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0bcd484587b3b3092e448d27dc369e347e1810c3 cve-icon cve-icon
https://git.kernel.org/stable/c/b82ef4985a6d05e80f604624332430351df7b79a cve-icon cve-icon
https://git.kernel.org/stable/c/b992f01e66150fc5e90be4a96f5eb8e634c8249e cve-icon cve-icon
https://git.kernel.org/stable/c/ff6bdc205fd0a83bd365405d4e31fb5905826996 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062011-CVE-2022-48770-34e0@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48770 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48770 cve-icon
History

Mon, 06 Jan 2025 22:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 19 Dec 2024 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2024-12-19T08:07:24.019Z

Reserved: 2024-06-20T11:09:39.061Z

Link: CVE-2022-48770

cve-icon Vulnrichment

Updated: 2024-08-03T15:25:01.559Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-20T12:15:14.953

Modified: 2025-01-06T21:43:45.823

Link: CVE-2022-48770

cve-icon Redhat

Severity : Low

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2022-48770 - Bugzilla