CVE - CVE-2022-48714

CVE-ID
CVE-2022-48714	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be1d1 ("kasan, vmalloc: unpoison VM_ALLOC pages after mapping"), non-VM_ALLOC mappings will be marked as accessible in __get_vm_area_node() when KASAN is enabled. But now the flag for ringbuf area is VM_ALLOC, so KASAN will complain out-of-bound access after vmap() returns. Because the ringbuf area is created by mapping allocated pages, so use VM_MAP instead. After the change, info in /proc/vmallocinfo also changes from [start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmalloc user to [start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmap user
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/5e457aeab52a5947619e1f18047f4d2f3212b3eb URL:https://git.kernel.org/stable/c/5e457aeab52a5947619e1f18047f4d2f3212b3eb MISC:https://git.kernel.org/stable/c/6304a613a97d6dcd49b93fbad31e9f39d1e138d6 URL:https://git.kernel.org/stable/c/6304a613a97d6dcd49b93fbad31e9f39d1e138d6 MISC:https://git.kernel.org/stable/c/b293dcc473d22a62dc6d78de2b15e4f49515db56 URL:https://git.kernel.org/stable/c/b293dcc473d22a62dc6d78de2b15e4f49515db56 MISC:https://git.kernel.org/stable/c/d578933f6226d5419af9306746efa1c693cbaf9c URL:https://git.kernel.org/stable/c/d578933f6226d5419af9306746efa1c693cbaf9c
Assigning CNA
kernel.org
Date Record Created
20240620	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240620)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)