NULL pointer dereference in Linux kernel - CVE-2022-48908

Vulnerability identifier: #VU96420

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-48908

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the com20020pci_probe() function in drivers/net/arcnet/com20020-pci.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
openEuler
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python2-perf
python2-perf-debuginfo
python3-perf
python3-perf-debuginfo

Install update from vendor's website.

Linux kernel - addressed in versions 4.9.305, 4.14.270, 4.19.233, 5.4.183, 5.10.104, 5.15.27, 5.16.13, 5.17
kernel - update to 4.19.90-2409.1.0.0293
bpftool - update to 4.19.90-2409.1.0.0293
bpftool-debuginfo - update to 4.19.90-2409.1.0.0293
kernel-debuginfo - update to 4.19.90-2409.1.0.0293
kernel-debugsource - update to 4.19.90-2409.1.0.0293
kernel-devel - update to 4.19.90-2409.1.0.0293
kernel-source - update to 4.19.90-2409.1.0.0293
kernel-tools - update to 4.19.90-2409.1.0.0293
kernel-tools-debuginfo - update to 4.19.90-2409.1.0.0293
kernel-tools-devel - update to 4.19.90-2409.1.0.0293
perf - update to 4.19.90-2409.1.0.0293
perf-debuginfo - update to 4.19.90-2409.1.0.0293
python2-perf - update to 4.19.90-2409.1.0.0293
python2-perf-debuginfo - update to 4.19.90-2409.1.0.0293
python3-perf - update to 4.19.90-2409.1.0.0293
python3-perf-debuginfo - update to 4.19.90-2409.1.0.0293

• https://git.kernel.org/stable/c/8e3bc7c5bbf87e86e9cd652ca2a9166942d86206
• https://git.kernel.org/stable/c/b1ee6b9340a38bdb9e5c90f0eac5b22b122c3049
• https://git.kernel.org/stable/c/b838add93e1dd98210482dc433768daaf752bdef
• https://git.kernel.org/stable/c/e50c589678e50f8d574612e473ca60ef45190896
• https://git.kernel.org/stable/c/5f394102ee27dbf051a4e283390cd8d1759dacea
• https://git.kernel.org/stable/c/ea372aab54903310756217d81610901a8e66cb7d
• https://git.kernel.org/stable/c/ca0bdff4249a644f2ca7a49d410d95b8dacf1f72
• https://git.kernel.org/stable/c/bd6f1fd5d33dfe5d1b4f2502d3694a7cc13f166d
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.270
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.233
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.305
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.104
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.27
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.13
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.183

• NULL pointer dereference in Linux kernel net arcnet driver
• openEuler 20.03 LTS SP4 update for kernel