Buffer overflow in Linux kernel - CVE-2022-49267

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU105464

Buffer overflow in Linux kernel - CVE-2022-49267

Published: March 10, 2025 / Updated: May 11, 2025


Vulnerability identifier: #VU105464
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-49267
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error caused by usage of sprintf() function in drivers/mmc/core/bus.c, drivers/mmc/core/sdio.c, drivers/mmc/core/sdio_bus.c, drivers/mmc/core/sd.c, and drivers/mmc/core/mmc.c files. A local user can trigger memory corruption and execute arbitrary code on the target system.


Affected software

Linux kernel
Ubuntu
openEuler
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-fips (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-azure (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-hwe-5.4 (Ubuntu package)
linux-iot (Ubuntu package)
linux-ibm-5.4 (Ubuntu package)
linux-gcp (Ubuntu package)
perf-debuginfo
python3-perf
kernel-devel
python3-perf-debuginfo
perf
kernel-tools-devel
kernel
kernel-tools-debuginfo
kernel-tools
kernel-source
kernel-debuginfo
kernel-headers
kernel-debugsource
bpftool
bpftool-debuginfo
linux-intel-iot-realtime (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-gcp-fips (Ubuntu package)

How to mitigate CVE-2022-49267

Install updates from vendor's website.

Linux kernel - addressed in versions 5.16.19, 5.17.2, 5.18
linux (Ubuntu package) - addressed in versions 4.4.0.278.284, 4.4.0-278.312, 4.4.0.1153.150, 4.4.0-1153.164, 4.4.0.1190.194, 4.4.0-1190.205, 4.15.0.247.231, 4.15.0-247.259, 4.15.0-247.259~16.04.1, 4.15.0.1151.156, 4.15.0-1151.162, 4.15.0-1151.162~16.04.1, 4.15.0.1171.162, 4.15.0-1171.176, 4.15.0.1182.195~16.04.1, 4.15.0-1182.199, 4.15.0-1182.199~16.04.1, 4.15.0.1189.187, 4.15.0-1189.202, 4.15.0-1189.202~16.04.1, 5.4.0.227.219, 5.4.0-227.247, 5.15.0.171.144, 5.15.0.171.160, 5.15.0-171.181, 5.15.0-171.181~20.04.1, 5.15.0.171.181~20.04.1, 5.15.0.1053.53, 5.15.0-1053.53, 5.15.0.1065.68, 5.15.0-1065.69, 5.15.0.1084.83, 5.15.0-1084.92, 5.15.0.1093.89, 5.15.0-1093.98, 5.15.0.1096.96, 5.15.0-1096.102, 5.15.0-1096.102~20.04.1, 5.15.0.1096.102~20.04.1, 5.15.0.1097.96, 5.15.0-1097.103, 5.15.0.1098.94, 5.15.0-1098.104, 5.15.0.1101.97, 5.15.0-1101.110
linux-aws (Ubuntu package) - addressed in versions 4.4.0-278.312~14.04.1, 4.4.0.278.312~14.04.1, 4.4.0.1152.149, 4.4.0-1152.158, 5.4.0.1074.74, 5.4.0-1074.78, 5.4.0.1154.148, 5.4.0-1154.164, 5.4.0-1154.164~18.04.1, 5.4.0.1156.153, 5.4.0-1156.166, 5.4.0-1156.166~18.04.1, 5.4.0-1159.168~18.04.1, 5.15.0-171.181~20.04.1, 5.15.0.171.181~20.04.1, 5.15.0-1042.42, 5.15.0.1042.44, 5.15.0.1053.53~20.04.1, 5.15.0-1053.53~20.04.1, 5.15.0.1095.91, 5.15.0-1095.98, 5.15.0.1095.98~20.04.1, 5.15.0-1095.98~20.04.1, 5.15.0.1098.104~20.04.1, 5.15.0-1098.104~20.04.1, 5.15.0.1101.104, 5.15.0-1101.108, 5.15.0-1101.108~20.04.1, 5.15.0.1101.108~20.04.1, 5.15.0-1101.110~20.04.1, 5.15.0.1101.110~20.04.1
linux-fips (Ubuntu package) - addressed in versions 4.4.0.1122.123, 4.4.0-1122.129, 5.4.0.1130.127, 5.4.0-1130.140, 5.4.0.1159.101, 5.4.0-1159.168+fips1, 5.15.0.171.98, 5.15.0-171.181+fips1
linux-aws-fips (Ubuntu package) - addressed in versions 4.15.0.1144.141, 4.15.0-1144.156, 4.15.0.2090.88, 4.15.0-2090.96, 4.15.0.2127.121, 4.15.0-2127.133, 5.4.0.1155.102, 5.4.0-1155.165+fips1, 5.15.0.1101.97, 5.15.0-1101.108+fips1
linux-azure (Ubuntu package) - addressed in versions 4.15.0.1197.165, 4.15.0-1197.212, 4.15.0-1197.212~14.04.1, 4.15.0-1197.212~16.04.1, 5.4.0.1160.153, 5.4.0-1160.166
linux-azure-fips (Ubuntu package) - addressed in versions 4.15.0.2106.102, 4.15.0-2106.112, 5.4.0.1160.97, 5.4.0-1160.166+fips1
linux-hwe-5.4 (Ubuntu package) - addressed in versions 5.4.0-227.247~18.04.1, 5.4.0-1102.107, 5.4.0.1102.131
linux-iot (Ubuntu package) - addressed in versions 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152
linux-ibm-5.4 (Ubuntu package) - update to 5.4.0-1102.107~18.04.1
linux-gcp (Ubuntu package) - addressed in versions 5.4.0.1159.161, 5.4.0-1159.168
perf-debuginfo - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
python3-perf - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-devel - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
python3-perf-debuginfo - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
perf - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-tools-devel - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-tools-debuginfo - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-tools - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-source - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-debuginfo - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-headers - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
kernel-debugsource - addressed in versions 5.10.0-293.0.0.195, 5.10.0-293.0.0.196
bpftool - update to 5.10.0-293.0.0.196
bpftool-debuginfo - update to 5.10.0-293.0.0.196
linux-intel-iot-realtime (Ubuntu package) - addressed in versions 5.15.0-1093.95, 5.15.0.1093.97, 5.15.0.1100.104, 5.15.0-1100.109
linux-nvidia (Ubuntu package) - addressed in versions 5.15.0.1096.96, 5.15.0-1096.97
linux-gcp-fips (Ubuntu package) - addressed in versions 5.15.0.1101.91, 5.15.0-1101.110+fips1

External References

Related Security Bulletins