< Back

CVE-2022-48804

Updated on 16 Jul 2024

Severity

5.5 Medium severity

Details

CVSS score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE ID: CWE-191 Integer Underflow (Wrap or Wraparound)
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

vt_ioctl: fix array_index_nospec in vt_setactivate

array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec.

Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.

Details

Affected product:: AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:: kernel @ 5.14.0 (+18 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 8	Released	43 kernels 4.18.0-240.15.1.el8_3 4.18.0-553.el8_10 4.18.0-240.22.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-477.27.2.el8_8 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.18.2.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10
AlmaLinux 9	Released	33 kernels 5.14.0-162.12.1.el9_1 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.24.2.el9_3 5.14.0-362.8.1.el9_3 5.14.0-427.13.1.el9_4 5.14.0-427.22.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-70.13.1.el9_0 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-427.16.1.el9_4 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4
Amazon Linux 2	Planned	—
Amazon Linux 2 5.10	Planned	—
Amazon Linux 2 5.4	Planned	—
CentOS 8	Released	33 kernels 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.5.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-147.el8 4.18.0-193.1.2.el8_2 4.18.0-193.14.2.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-193.6.3.el8_2 4.18.0-193.el8 4.18.0-240.1.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8 4.18.0-305.7.1.el8_4 4.18.0-348.2.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-80.1.2.el8_0 4.18.0-80.11.1.el8_0 4.18.0-80.11.2.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.el8
CloudLinux OS 7h	Released	60 kernels 4.18.0-147.0.3.el7h.lve 4.18.0-553.lve.el7h 4.18.0-80.7.2.el7h 4.18.0-147.0.3.el7h 4.18.0-147.3.1.el7h.lve.1 4.18.0-147.8.1.el7h.lve.1 4.18.0-147.8.1.el7h.lve 4.18.0-193.28.1.lve1.el7h 4.18.0-305.10.2.2.lve.el7h 4.18.0-305.10.2.lve.el7h 4.18.0-305.12.1.lve.el7h 4.18.0-305.17.1.lve.el7h 4.18.0-305.19.1.lve.el7h 4.18.0-305.7.1.lve.el7h 4.18.0-305.lve.el7h 4.18.0-348.12.2.lve.1.el7h 4.18.0-348.12.2.lve.2.el7h 4.18.0-348.12.2.lve.el7h 4.18.0-348.20.1.lve.1.el7h 4.18.0-348.20.1.lve.el7h 4.18.0-348.23.1.lve.el7h 4.18.0-348.7.1.lve.el7h 4.18.0-348.lve.el7h 4.18.0-372.13.1.lve.el7h 4.18.0-372.16.1.lve.el7h 4.18.0-372.19.1.lve.el7h 4.18.0-372.26.1.lve.1.el7h 4.18.0-372.32.1.lve.el7h 4.18.0-372.9.1.lve.el7h 4.18.0-425.10.1.lve.el7h 4.18.0-425.13.1.lve.el7h 4.18.0-425.19.2.lve.el7h 4.18.0-425.3.1.lve.1.el7h 4.18.0-425.3.1.lve.2.el7h 4.18.0-425.3.1.lve.3.el7h 4.18.0-425.3.1.lve.el7h 4.18.0-477.10.1.lve.1.el7h 4.18.0-477.13.1.lve.1.el7h 4.18.0-477.13.1.lve.el7h 4.18.0-477.15.1.lve.1.el7h 4.18.0-477.15.1.lve.2.el7h 4.18.0-477.21.1.lve.1.el7h 4.18.0-477.21.1.lve.el7h 4.18.0-477.27.1.lve.el7h 4.18.0-477.27.2.lve.el7h 4.18.0-513.11.1.lve.1.el7h 4.18.0-513.11.1.lve.el7h 4.18.0-513.18.1.lve.1.el7h 4.18.0-513.18.1.lve.2.el7h 4.18.0-513.18.1.lve.el7h 4.18.0-513.24.1.lve.1.el7h 4.18.0-513.24.1.lve.2.el7h 4.18.0-513.24.1.lve.el7h 4.18.0-513.5.1.lve.el7h 4.18.0-513.9.1.lve.el7h 4.18.0-553.16.1.lve.1.el7h 4.18.0-553.16.1.lve.el7h 4.18.0-553.5.1.lve.1.el7h 4.18.0-553.5.1.lve.el7h 4.18.0-553.8.1.lve.el7h
CloudLinux OS 8	Released	56 kernels 4.18.0-147.0.3.lve.el8 4.18.0-147.3.1.el8.lve.1 4.18.0-147.8.1.el8.lve.1 4.18.0-147.8.1.el8.lve 4.18.0-193.28.1.lve1.el8 4.18.0-305.10.2.2.lve.el8 4.18.0-305.10.2.lve.el8 4.18.0-305.12.1.lve.el8 4.18.0-305.17.1.lve.el8 4.18.0-305.19.1.lve.el8 4.18.0-305.7.1.lve.el8 4.18.0-305.lve.el8 4.18.0-348.12.2.lve.el8 4.18.0-348.20.1.lve.1.el8 4.18.0-348.20.1.lve.el8 4.18.0-348.23.1.lve.el8 4.18.0-348.7.1.lve.el8 4.18.0-348.lve.el8 4.18.0-372.13.1.lve.el8 4.18.0-372.16.1.lve.el8 4.18.0-372.19.1.lve.el8 4.18.0-372.26.1.lve.1.el8 4.18.0-372.32.1.lve.el8 4.18.0-372.9.1.1.lve.el8 4.18.0-372.9.1.lve.el8 4.18.0-425.10.1.lve.el8 4.18.0-425.13.1.lve.el8 4.18.0-425.19.2.lve.el8 4.18.0-425.3.1.lve.1.el8 4.18.0-425.3.1.lve.2.el8 4.18.0-425.3.1.lve.3.el8 4.18.0-425.3.1.lve.el8 4.18.0-477.10.1.lve.el8 4.18.0-477.13.1.lve.1.el8 4.18.0-477.13.1.lve.el8 4.18.0-477.15.1.lve.2.el8 4.18.0-477.21.1.lve.1.el8 4.18.0-477.21.1.lve.el8 4.18.0-477.27.1.lve.el8 4.18.0-477.27.2.lve.el8 4.18.0-513.11.1.lve.el8 4.18.0-513.18.1.lve.1.el8 4.18.0-513.18.1.lve.2.el8 4.18.0-513.18.1.lve.el8 4.18.0-513.24.1.lve.1.el8 4.18.0-513.24.1.lve.2.el8 4.18.0-513.24.1.lve.el8 4.18.0-513.5.1.lve.el8 4.18.0-513.9.1.lve.el8 4.18.0-544.lve.el8 4.18.0-553.16.1.lve.1.el8 4.18.0-553.16.1.lve.el8 4.18.0-553.5.1.lve.1.el8 4.18.0-553.5.1.lve.el8 4.18.0-553.8.1.lve.el8 4.18.0-553.lve.el8
Debian 11	Planned	—
Oracle Linux 6 UEK 4	Will Not Fix	—
Oracle Linux 7 UEK 4	Will Not Fix	—
Oracle Linux 8	Released	68 kernels 4.18.0-147.0.2.el8_1 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.5.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-147.el8 4.18.0-193.1.2.el8_2 4.18.0-193.13.2.el8_2 4.18.0-193.14.3.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-193.6.3.el8_2 4.18.0-193.el8 4.18.0-240.1.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.0.1.el8_6 4.18.0-372.16.1.0.1.el8_6 4.18.0-372.19.1.0.1.el8_6 4.18.0-372.26.1.0.1.el8_6 4.18.0-372.32.1.0.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.0.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.0.1.el8_9 4.18.0-513.18.0.1.el8_9 4.18.0-513.18.0.2.el8_9 4.18.0-513.18.1.0.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10 4.18.0-80.1.2.el8_0 4.18.0-80.11.1.el8_0 4.18.0-80.11.2.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.el8
Oracle Linux 9	Released	39 kernels 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.0.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.0.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.13.0.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.0.1.el9_3 5.14.0-362.18.0.2.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.0.1.el9_3 5.14.0-362.24.1.0.2.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.8.1.el9_3 5.14.0-427.13.1.el9_4 5.14.0-427.16.1.el9_4 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4 5.14.0-427.22.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-70.13.1.0.3.el9_0 5.14.0-70.17.1.0.1.el9_0 5.14.0-70.22.1.0.1.el9_0 5.14.0-70.26.1.0.1.el9_0 5.14.0-70.30.1.0.1.el9_0
RHEL 8	Released	64 kernels 4.18.0-147.0.2.el8_1 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.5.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-147.el8 4.18.0-193.1.2.el8_2 4.18.0-193.13.2.el8_2 4.18.0-193.14.3.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-193.6.3.el8_2 4.18.0-193.el8 4.18.0-240.1.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10 4.18.0-80.1.2.el8_0 4.18.0-80.11.1.el8_0 4.18.0-80.11.2.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.el8
RHEL 9	Released	33 kernels 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.8.1.el9_3 5.14.0-427.13.1.el9_4 5.14.0-427.16.1.el9_4 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4 5.14.0-427.22.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-70.13.1.el9_0 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-70.5.1.el9_0
Rocky Linux 8	Released	38 kernels 4.18.0-553.el8_10 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6.0.1 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9.0.1 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10
Rocky Linux 9	Released	33 kernels 5.14.0-162.12.1.el9_1.0.1 5.14.0-162.12.1.el9_1.0.2 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1.0.1 5.14.0-162.6.1.el9_1 5.14.0-284.30.1.el9_2 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3.0.1 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3.0.1 5.14.0-362.24.1.el9_3 5.14.0-362.8.1.el9_3 5.14.0-427.16.1.el9_4 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4.0.1 5.14.0-427.20.1.el9_4 5.14.0-427.22.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-70.22.1.el9_0 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-284.11.1.el9_2 5.14.0-427.13.1.el9_4
Ubuntu 18.04	Planned	—
Ubuntu 20.04	Planned	—

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2022-48804

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!