CVE-2022-48730
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-48730
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48730.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-48730
- Downstream
- Related
- Published
- 2024-06-20T11:13:18Z
- Modified
- 2025-10-15T15:47:01.699643Z
- Summary
- dma-buf: heaps: Fix potential spectre v1 gadget
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
dma-buf: heaps: Fix potential spectre v1 gadget
It appears like nr could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using arrayindexnospec.
[sumits: added fixes and cc: stable tags]
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/24f8e12d965b24f8aea762589e0e9fe2025c005e
- https://git.kernel.org/stable/c/5d40f1bdad3dd1a177f21a90ad4353c1ed40ba3a
- https://git.kernel.org/stable/c/92c4cfaee6872038563c5b6f2e8e613f9d84d47d
- https://git.kernel.org/stable/c/cc8f7940d9c2d45f67b3d1a2f2b7a829ca561bed
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc02a81fba74fe3488ad6b08bfb5a1329005418f8Fixed5d40f1bdad3dd1a177f21a90ad4353c1ed40ba3a
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc02a81fba74fe3488ad6b08bfb5a1329005418f8Fixed24f8e12d965b24f8aea762589e0e9fe2025c005e
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc02a81fba74fe3488ad6b08bfb5a1329005418f8Fixedcc8f7940d9c2d45f67b3d1a2f2b7a829ca561bed
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc02a81fba74fe3488ad6b08bfb5a1329005418f8Fixed92c4cfaee6872038563c5b6f2e8e613f9d84d47d
Affected versions
v5.*
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.10.1
v5.10.10
v5.10.11
v5.10.12
v5.10.13
v5.10.14
v5.10.15
v5.10.16
v5.10.17
v5.10.18
v5.10.19
v5.10.2
v5.10.20
v5.10.21
v5.10.22
v5.10.23
v5.10.24
v5.10.25
v5.10.26
v5.10.27
v5.10.28
v5.10.29
v5.10.3
v5.10.30
v5.10.31
v5.10.32
v5.10.33
v5.10.34
v5.10.35
v5.10.36
v5.10.37
v5.10.38
v5.10.39
v5.10.4
v5.10.40
v5.10.41
v5.10.42
v5.10.43
v5.10.44
v5.10.45
v5.10.46
v5.10.47
v5.10.48
v5.10.49
v5.10.5
v5.10.50
v5.10.51
v5.10.52
v5.10.53
v5.10.54
v5.10.55
v5.10.56
v5.10.57
v5.10.58
v5.10.59
v5.10.6
v5.10.60
v5.10.61
v5.10.62
v5.10.63
v5.10.64
v5.10.65
v5.10.66
v5.10.67
v5.10.68
v5.10.69
v5.10.7
v5.10.70
v5.10.71
v5.10.72
v5.10.73
v5.10.74
v5.10.75
v5.10.76
v5.10.77
v5.10.78
v5.10.79
v5.10.8
v5.10.80
v5.10.81
v5.10.82
v5.10.83
v5.10.84
v5.10.85
v5.10.86
v5.10.87
v5.10.88
v5.10.89
v5.10.9
v5.10.90
v5.10.91
v5.10.92
v5.10.93
v5.10.94
v5.10.95
v5.10.96
v5.10.97
v5.10.98
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.3
v5.15.4
v5.15.5
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.16.1
v5.16.2
v5.16.3
v5.16.4
v5.16.5
v5.16.6
v5.16.7
v5.17-rc1
v5.4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8
Database specific
vanir_signatures
[
{
"digest": {
"function_hash": "286713757498017438604001811428641270626",
"length": 1048.0
},
"target": {
"function": "dma_heap_ioctl",
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24f8e12d965b24f8aea762589e0e9fe2025c005e",
"signature_version": "v1",
"id": "CVE-2022-48730-04037ec4"
},
{
"digest": {
"function_hash": "286713757498017438604001811428641270626",
"length": 1048.0
},
"target": {
"function": "dma_heap_ioctl",
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc8f7940d9c2d45f67b3d1a2f2b7a829ca561bed",
"signature_version": "v1",
"id": "CVE-2022-48730-0cef8510"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"47945987605112108888428681970823575191",
"68429015698352824297158460859584013360",
"276600609892156343450926796323703085111",
"270543084158467361761838070722084147375",
"259338825670454522772811979125523842693",
"56044046210453101280774016513601854910",
"269130342320155388030271724028011673058"
]
},
"target": {
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d40f1bdad3dd1a177f21a90ad4353c1ed40ba3a",
"signature_version": "v1",
"id": "CVE-2022-48730-493b59d4"
},
{
"digest": {
"function_hash": "286713757498017438604001811428641270626",
"length": 1048.0
},
"target": {
"function": "dma_heap_ioctl",
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d40f1bdad3dd1a177f21a90ad4353c1ed40ba3a",
"signature_version": "v1",
"id": "CVE-2022-48730-79fd4236"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"47945987605112108888428681970823575191",
"68429015698352824297158460859584013360",
"276600609892156343450926796323703085111",
"270543084158467361761838070722084147375",
"259338825670454522772811979125523842693",
"56044046210453101280774016513601854910",
"269130342320155388030271724028011673058"
]
},
"target": {
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc8f7940d9c2d45f67b3d1a2f2b7a829ca561bed",
"signature_version": "v1",
"id": "CVE-2022-48730-7b211a8e"
},
{
"digest": {
"function_hash": "286713757498017438604001811428641270626",
"length": 1048.0
},
"target": {
"function": "dma_heap_ioctl",
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92c4cfaee6872038563c5b6f2e8e613f9d84d47d",
"signature_version": "v1",
"id": "CVE-2022-48730-84ff2def"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"47945987605112108888428681970823575191",
"68429015698352824297158460859584013360",
"276600609892156343450926796323703085111",
"270543084158467361761838070722084147375",
"259338825670454522772811979125523842693",
"56044046210453101280774016513601854910",
"269130342320155388030271724028011673058"
]
},
"target": {
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92c4cfaee6872038563c5b6f2e8e613f9d84d47d",
"signature_version": "v1",
"id": "CVE-2022-48730-a1555d48"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"47945987605112108888428681970823575191",
"68429015698352824297158460859584013360",
"276600609892156343450926796323703085111",
"270543084158467361761838070722084147375",
"259338825670454522772811979125523842693",
"56044046210453101280774016513601854910",
"269130342320155388030271724028011673058"
]
},
"target": {
"file": "drivers/dma-buf/dma-heap.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24f8e12d965b24f8aea762589e0e9fe2025c005e",
"signature_version": "v1",
"id": "CVE-2022-48730-e9fde813"
}
]