Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48672

of: fdt: fix off-by-one error in unflatten_dt_nodes()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes() Commit 78c44d910d3e ("drivers/of: Fix depth when unflattening devicetree") forgot to fix up the depth check in the loop body in unflatten_dt_nodes() which makes it possible to overflow the nps[] buffer... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 to < cbdda20ce363356698835185801a58a28f644853affected
  • 78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 to < 2566706ac6393386a4e7c4ce23fe17f4c98d9aa0affected
  • 78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 to < e0e88c25f88b9805572263c9ed20f1d88742feafaffected
  • 78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 to < ee4369260e77821602102dcc7d792de39a56365caffected
  • 78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 to < ba6b9f7cc1108bad6e2c53b1d6e0156379188db7affected
  • 78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 to < 2133f451311671c7c42b5640d2b999326b39aa0eaffected
  • 78c44d910d3e5f96dc6b3695fc1e4efd7c46a455 to < 2f945a792f67815abca26fa8a5e863ccf3fa1181affected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 4.14.295 to ≤ 4.14.*unaffected
  • 4.19.260 to ≤ 4.19.*unaffected
  • 5.4.215 to ≤ 5.4.*unaffected
  • 5.10.145 to ≤ 5.10.*unaffected
  • 5.15.70 to ≤ 5.15.*unaffected
  • 5.19.11 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References