Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-48638

cgroup: cgroup_get_from_id() must check the looked-up kn is a directory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6b658c4863c15936872a93c9ee879043bf6393c9 to < 8484a356cee8ce3d6a8e6266ff99be326e9273adaffected
  • 6b658c4863c15936872a93c9ee879043bf6393c9 to < 1e9571887f97b17cf3ffe9aa4da89090ea60988baffected
  • 6b658c4863c15936872a93c9ee879043bf6393c9 to < df02452f3df069a59bc9e69c84435bf115cb6e37affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.72 to ≤ 5.15.*unaffected
  • 5.19.12 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References