Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48938
HistoryAug 22, 2024 - 3:31 a.m.

CVE-2022-48938 CDC-NCM: avoid overflow in sanity checking

2024-08-2203:31:33
Linux
github.com
1
cve-2022-48938
cdc-ncm
integer overflow
linux kernel
sanity checking

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

A broken device may give an extreme offset like 0xFFF0
and a reasonable length for a fragment. In the sanity
check as formulated now, this will create an integer
overflow, defeating the sanity check. Both offset
and offset + len need to be checked in such a manner
that no overflow can occur.
And those quantities should be unsigned.

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial