CVE-2022-48619: Medium severity Linux Linux kernel vulnerability
An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because inputsetcapability mishandles the situation in which an event code falls outside of a bitmap.
Other sources
Linux Kernel is vulnerable to a denial of service, caused by a flaw in the inputsetcapability() function when an event code is outside the bitmap. By sending a specially crafted request, a local attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48619?
CVE-2022-48619 is classified as a denial of service vulnerability that can lead to kernel panic.
How do I fix CVE-2022-48619?
To fix CVE-2022-48619, upgrade the Linux kernel to version 5.18 or later, or apply the specific patches provided for the vulnerable versions.
Which versions of the Linux kernel are affected by CVE-2022-48619?
CVE-2022-48619 affects the Linux kernel versions prior to 5.17.10.
Is CVE-2022-48619 present in Red Hat distributions?
Yes, CVE-2022-48619 affects Red Hat distributions with the kernel versions below 5.18.
What components of the system does CVE-2022-48619 affect?
CVE-2022-48619 primarily affects the input handling components of the Linux kernel.