In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix off by one in BIOS boundary checking
Bounds checking when parsing init scripts embedded in the BIOS reject access to the last byte. This causes driver initialization to fail on Apple eMac's with GeForce 2 MX GPUs, leaving the system with no working console.
This is probably only seen on OpenFirmware machines like PowerPC Macs because the BIOS image provided by OF is only the used parts of the ROM, not a power-of-two blocks read from PCI directly so PCs always have empty bytes at the end that are never accessed.
{ "vanir_signatures": [ { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-0730a8d2", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@909d3ec1bf9f0ec534bfc081b77c0836fea7b0e2" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-0c6fbfd9", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4b746e60fd8eaa8016e144223abe91158edcdad" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-172c2b31", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@909d3ec1bf9f0ec534bfc081b77c0836fea7b0e2" }, { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-2603ae9c", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d877e814a62b7de9069aeff8bc1d979dfc996e06" }, { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-32ceb857", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4b746e60fd8eaa8016e144223abe91158edcdad" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-42970fdb", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@acc887ba88333f5fec49631f12d8cc7ebd95781c" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-438844b6", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7c36fa8a1e63b08312162179c78a0c7795ea369" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-4713da18", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d877e814a62b7de9069aeff8bc1d979dfc996e06" }, { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-6fedce4f", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f071d9fa857582d7bd77f4906691f73d3edeab73" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-84cb7a67", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b777d4d9e383d2744fc9b3a09af6ec1893c8b1a" }, { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-871097cc", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2a21669ee98aafc41c6d42ef15af4dab9e6e882" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-b8ee2219", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2a21669ee98aafc41c6d42ef15af4dab9e6e882" }, { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-c6da55d8", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@acc887ba88333f5fec49631f12d8cc7ebd95781c" }, { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-e8f46d8d", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7c36fa8a1e63b08312162179c78a0c7795ea369" }, { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "194313258899704953356345696522452161985", "146208733873738595171240252553840520094", "40896447280853423834114582069345487125", "36748179396402743798154103218743380652" ] }, "id": "CVE-2022-48732-fc90bb79", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f071d9fa857582d7bd77f4906691f73d3edeab73" }, { "signature_version": "v1", "digest": { "length": 396.0, "function_hash": "48633014557098842312733200020464463265" }, "id": "CVE-2022-48732-fefe7cae", "deprecated": false, "target": { "file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c", "function": "nvbios_addr" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b777d4d9e383d2744fc9b3a09af6ec1893c8b1a" } ] }