CVE-2022-48967

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-48967
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48967.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48967
Downstream
Related
Published
2024-10-21T20:05:49.740Z
Modified
2026-04-11T12:43:23.010541Z
Summary
NFC: nci: Bounds check struct nfc_target arrays
Details

In the Linux kernel, the following vulnerability has been resolved:

NFC: nci: Bounds check struct nfc_target arrays

While running under CONFIGFORTIFYSOURCE=y, syzkaller reported:

memcpy: detected field-spanning write (size 129) of single field "target->sensf_res" at net/nfc/nci/ntf.c:260 (size 18)

This appears to be a legitimate lack of bounds checking in nciaddnew_protocol(). Add the missing checks.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48967.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5
Fixed
6b37f0dc0638d13a006f2f24d2f6ca61e83bc714
Fixed
dbdcfb9f6748218a149f62468d6297ce3f014e9c
Fixed
cff35329070b96b4484d23f9f48a5ca2c947e750
Fixed
6778434706940b8fad7ef35f410d2b9929f256d2
Fixed
27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9
Fixed
908b2da426fe9c3ce74cf541ba40e7a4251db191
Fixed
f41547546db9af99da2c34e3368664d7a79cefae
Fixed
e329e71013c9b5a4535b099208493c7826ee4a64

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48967.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.0
Fixed
4.9.336
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.302
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.269
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.227
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.159
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.83
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.13

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48967.json"