CVE-2022-49444

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49444
In the Linux kernel, the following vulnerability has been resolved: module: fix [e_shstrndx].sh_size=0 OOB access It is trivial to craft a module to trigger OOB access in this line: if (info->secstrings[strhdr->sh_size - 1] != '\0') { BUG: unable to handle page fault for address: ffffc90000aa0fff PGD 100000067 P4D 100000067 PUD 100066067 PMD 10436f067 PTE 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 7 PID: 1215 Comm: insmod Not tainted 5.18.0-rc5-00007-g9bf578647087-dirty #10 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014 RIP: 0010:load_module+0x19b/0x2391 [rebased patch onto modules-next]

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/09cb6663618a74fe5572a4931ecbf098832e79ec Patch
https://git.kernel.org/stable/c/391e982bfa632b8315235d8be9c0a81374c6a19c Patch
https://git.kernel.org/stable/c/45a76414b6d8b8b39c23fea53b9d20e831ae72a0 Patch
https://git.kernel.org/stable/c/921630e2e5124a04158129a8f22f4b425e61a858 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Oct 2025, 17:26

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/09cb6663618a74fe5572a4931ecbf098832e79ec - () https://git.kernel.org/stable/c/09cb6663618a74fe5572a4931ecbf098832e79ec - Patch
References () https://git.kernel.org/stable/c/391e982bfa632b8315235d8be9c0a81374c6a19c - () https://git.kernel.org/stable/c/391e982bfa632b8315235d8be9c0a81374c6a19c - Patch
References () https://git.kernel.org/stable/c/45a76414b6d8b8b39c23fea53b9d20e831ae72a0 - () https://git.kernel.org/stable/c/45a76414b6d8b8b39c23fea53b9d20e831ae72a0 - Patch
References () https://git.kernel.org/stable/c/921630e2e5124a04158129a8f22f4b425e61a858 - () https://git.kernel.org/stable/c/921630e2e5124a04158129a8f22f4b425e61a858 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: módulo: fix [e_shstrndx].sh_size=0 Acceso OOB Es trivial crear un módulo para activar el acceso OOB en esta línea: if (info->secstrings[strhdr->sh_size - 1] != '\0') { ERROR: no se puede controlar el error de página para la dirección: ffffc90000aa0fff PGD 100000067 P4D 100000067 PUD 100066067 PMD 10436f067 PTE 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 7 PID: 1215 Comm: insmod Not tainted 5.18.0-rc5-00007-g9bf578647087-dirty #10 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014 RIP: 0010:load_module+0x19b/0x2391 [rebased patch onto modules-next]
CWE CWE-125

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-21 17:26

NVD link : CVE-2022-49444

Mitre link : CVE-2022-49444

CVE.ORG link : CVE-2022-49444

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read