Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2022-41802

Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenHarmony

Description

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenHarmony OpenHarmony

  • 3.1.0affected
  • 3.0.0affected
  • 1.1.0affected

References