A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first grufileunlockedioctl function is called by the user, where a fail pass occurs in the grucheckchipletassignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3424.json"
[
{
"id": "CVE-2022-3424-0f78a6e3",
"source": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"target": {
"file": "drivers/misc/sgi-gru/grumain.c",
"function": "gru_fault"
},
"digest": {
"function_hash": "310666612092908981817096427189899262419",
"length": 1012.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2022-3424-2050092e",
"source": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"target": {
"file": "drivers/misc/sgi-gru/grumain.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"175460660526287395926652565435989042639",
"122542076409915253433298921912606156492",
"158584325637032143144354908290785639005",
"10141324370988214318681823282139337470",
"231557287947927892147053305096034171771",
"213244969454111044012232617936966714036",
"274780905472266765944967526655285951205",
"326685833718807555334087265952163302471",
"201826945049032498756717170637526875415",
"244708510337150462471882617999957105680",
"236763196731769667374297333034015573623",
"112947627765398179926694143514243148088",
"140635706828078018677459758024734450975",
"21022430409444110000245168127244766874",
"14568115679850102630175505982128515949",
"21248455958555985391386401712412028481",
"182389882271650634315251444264931941010",
"39723167221277525726025739195729953570",
"4524939428332246278364054346944234673"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2022-3424-426c9aed",
"source": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"target": {
"file": "drivers/misc/sgi-gru/grufault.c",
"function": "gru_handle_user_call_os"
},
"digest": {
"function_hash": "112692207511077660315307015557683907632",
"length": 910.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2022-3424-624d07f6",
"source": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"target": {
"file": "drivers/misc/sgi-gru/grufault.c",
"function": "gru_set_context_option"
},
"digest": {
"function_hash": "225407126584141384628148327612800654010",
"length": 986.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2022-3424-66dee50a",
"source": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"target": {
"file": "drivers/misc/sgi-gru/grutables.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"216574302821859835941978442899584341212",
"170864263775124810459622066745801149140",
"45200738827561763193723253302686829757",
"141839879194643623675529020138185939401"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2022-3424-7600fe59",
"source": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"target": {
"file": "drivers/misc/sgi-gru/grumain.c",
"function": "gru_check_context_placement"
},
"digest": {
"function_hash": "99732580092703727692598318285386353405",
"length": 318.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2022-3424-8a1656a0",
"source": "https://github.com/torvalds/linux/commit/643a16a0eb1d6ac23744bb6e90a00fc21148a9dc",
"target": {
"file": "drivers/misc/sgi-gru/grufault.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"22506480726218579660457389999987179499",
"130889492840918098750774393760595469304",
"207068043341179947630988747583646669146",
"292970782713046565478677011517598282773",
"297345115958458421132093985277198653391",
"147837968981390091042162049647893398171",
"244794476044004611634196344882144561493",
"3810455090535190996270732804533416392",
"289059780664476620316496069426631979776",
"47238997264355100288733267894192293106",
"300121742320907276022036283671769493003"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
}
]