UBUNTU-CVE-2022-48703

    Dashboard / Vulnerabilities / UBUNTU-CVE-2022-48703

    UBUNTU-CVE-2022-48703

    Published: 3 May 2024Last Modified: 9 Sept 2026
    Upstream:
    CVE-2022-48703
    Aliases:
    USN-7774-1
    USN-7774-2
    USN-7774-3

    Summary:

    Details: In the Linux kernel, the following vulnerability has been resolved: thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR In some case, the GDDV returns a package with a buffer which has zero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10). Then the data_vault_read() got NULL point dereference problem when accessing the 0x10 value in data_vault. [ 71.024560] BUG: kernel NULL pointer dereference, address: 0000000000000010 This patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or NULL value in data_vault.

    References: https://ubuntu.com/security/CVE-2022-48703, https://www.cve.org/CVERecord?id=CVE-2022-48703, https://git.kernel.org/linus/7931e28098a4c1a2a6802510b0cbe57546d2049d, https://git.kernel.org/stable/c/dae42083b045a4ddf71c57cf350cb2412b5915c2, https://git.kernel.org/stable/c/7931e28098a4c1a2a6802510b0cbe57546d2049d, https://ubuntu.com/security/notices/USN-7774-1, https://ubuntu.com/security/notices/USN-7774-2, https://ubuntu.com/security/notices/USN-7774-3, https://ubuntu.com/security/notices/USN-7775-1, https://ubuntu.com/security/notices/USN-7776-1, https://ubuntu.com/security/notices/USN-7775-2, https://ubuntu.com/security/notices/USN-7775-3, https://ubuntu.com/security/notices/USN-7774-4, https://ubuntu.com/security/notices/USN-7774-5

    Affected packages

    Package

    Name: linux

    Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra-legacy%2Ftrusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    3.11.0-12.19

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2022-48703 | CVE-DB