CVE-2022-48804

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-48804
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48804.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48804
Downstream
Related
Published
2024-07-16T11:43:56.278Z
Modified
2026-04-11T12:41:18.930823Z
Summary
vt_ioctl: fix array_index_nospec in vt_setactivate
Details

In the Linux kernel, the following vulnerability has been resolved:

vtioctl: fix arrayindexnospec in vtsetactivate

arrayindexnospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with arrayindexnospec.

Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48804.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0ec459ec174031fad02a55e622cf2fc0d2e75a25
Fixed
830c5aa302ec16b4ee641aec769462c37f802c90
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4334a6ae867aa12f01c1755368fd0de4c926ac75
Fixed
2a45a6bd1e6d651770aafff57ab3e1d3bb0b42e0
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e97267cb4d1ee01ca0929638ec0fcbb0904f903d
Fixed
170325aba4608bde3e7d21c9c19b7bc266ac0885
Fixed
ae3d57411562260ee3f4fd5e875f410002341104
Fixed
778302ca09498b448620edd372dc908bebf80bdf
Fixed
ffe54289b02e9c732d6f04c8ebbe3b2d90d32118
Fixed
6550bdf52846f85a2a3726a5aa0c7c4399f2fc02
Fixed
61cc70d9e8ef5b042d4ed87994d20100ec8896d9
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
458697ab18b512445ac273ce68a9f8fd623fc0a3
Last affected
1aa698b65186c13ed775896ed1dfec7c26c73d60
Last affected
52ef74c21c277e50de771fc722d814a830b3036b

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48804.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.9.302
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.267
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.230
Type
ECOSYSTEM
Events
Introduced
4.19.0
Fixed
5.4.180
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.10.101
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.15.24
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.16.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48804.json"