CVE-2022-48747: block: Fix wrong offset in bio_truncate()
In the Linux kernel, the following vulnerability has been resolved:
block: Fix wrong offset in biotruncate()
biotruncate() clears the buffer outside of last block of bdev, however current biotruncate() is using the wrong offset of page. So it can return the uninitialized data.
This happened when both of truncated/corrupted FS and userspace (via bdev) are trying to read the last of bdev.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
block: Fix wrong offset in biotruncate()
The Linux kernel CVE team has assigned CVE-2022-48747 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024062004-CVE-2022-48747-c63f@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48747?
CVE-2022-48747 has been classified as having a moderate severity level.
How do I fix CVE-2022-48747?
To fix CVE-2022-48747, update your Linux kernel to version 5.4.176, 5.10.96, 5.15.19, 5.16.5, or 5.17.
What type of vulnerability is CVE-2022-48747?
CVE-2022-48747 is a buffer handling vulnerability within the Linux kernel.
What impact does CVE-2022-48747 have on my system?
CVE-2022-48747 can lead to the exposure of uninitialized data, potentially allowing attacks.
Which Linux distributions are affected by CVE-2022-48747?
CVE-2022-48747 affects Linux distributions that use the specified vulnerable kernel versions.