CVE-2022-48665CWE-191

CVE-2022-48665

High · published April 28, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

exfat: fix overflow for large capacity partition

Using int type for sector index, there will be overflow in a large

capacity partition.

For example, if storage with sector size of 512 bytes and partition

capacity is larger than 2TB, there will be overflow.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2024-04-28T17:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 5.19, < 5.19.125.19.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/17244f71765dfec39e84493993993e896c376d09 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2e9ceb6728f1dc2fa4b5d08f37d88cbc49a20a62 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/17244f71765dfec39e84493993993e896c376d09 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/2e9ceb6728f1dc2fa4b5d08f37d88cbc49a20a62 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 28 APR 13:01Z
    exfat: fix overflow for large capacity partition
    cvelistv5