Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2022-45126

Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenHarmony

Description

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenHarmony OpenHarmony

Default version status: unaffected

  • 3.1.0 to ≤ 3.1.4affected
  • 3.0.0 to ≤ 3.0.6affected
  • 1.1.0 to ≤ 1.1.5affected

References