CVE - CVE-2022-49444

CVE-ID
CVE-2022-49444	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: module: fix [e_shstrndx].sh_size=0 OOB access It is trivial to craft a module to trigger OOB access in this line: if (info->secstrings[strhdr->sh_size - 1] != '\0') { BUG: unable to handle page fault for address: ffffc90000aa0fff PGD 100000067 P4D 100000067 PUD 100066067 PMD 10436f067 PTE 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 7 PID: 1215 Comm: insmod Not tainted 5.18.0-rc5-00007-g9bf578647087-dirty #10 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014 RIP: 0010:load_module+0x19b/0x2391 [rebased patch onto modules-next]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/09cb6663618a74fe5572a4931ecbf098832e79ec URL:https://git.kernel.org/stable/c/09cb6663618a74fe5572a4931ecbf098832e79ec MISC:https://git.kernel.org/stable/c/391e982bfa632b8315235d8be9c0a81374c6a19c URL:https://git.kernel.org/stable/c/391e982bfa632b8315235d8be9c0a81374c6a19c MISC:https://git.kernel.org/stable/c/45a76414b6d8b8b39c23fea53b9d20e831ae72a0 URL:https://git.kernel.org/stable/c/45a76414b6d8b8b39c23fea53b9d20e831ae72a0 MISC:https://git.kernel.org/stable/c/921630e2e5124a04158129a8f22f4b425e61a858 URL:https://git.kernel.org/stable/c/921630e2e5124a04158129a8f22f4b425e61a858
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)