CVE-2022-48696CWE-120

CVE-2022-48696

High · published May 3, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

regmap: spi: Reserve space for register address/padding

Currently the max_raw_read and max_raw_write limits in regmap_spi struct

do not take into account the additional size of the transmitted register

address and padding. This may result in exceeding the maximum permitted

SPI message size, which could cause undefined behaviour, e.g. data

corruption.

Fix regmap_get_spi_bus() to properly adjust the above mentioned limits

by reserving space for the register address/padding as set in the regmap

configuration.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00197 · 8.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-05-03T20:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 5.19.95.19.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 03 MAY 15:09Z
    regmap: spi: Reserve space for register address/padding
    cvelistv5