CVE-2022-48777

mtd: parsers: qcom: Fix kernel panic on skipped partition

published July 16, 2024

CVSS
—
EPSS
0%
Percentile
12.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mtd: parsers: qcom: Fix kernel panic on skipped partition

In the event of a skipped partition (case when the entry name is empty)

the kernel panics in the cleanup function as the name entry is NULL.

Rework the parser logic by first checking the real partition number and

then allocate the space and set the data for the valid partitions.

The logic was also fundamentally wrong as with a skipped partition, the

parts number returned was incorrect by not decreasing it for the skipped

partitions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.4th percentile
Published
2024-07-16T11:13Z
EPSS history
Timeline
  • 16 JUL 11:13Z
    mtd: parsers: qcom: Fix kernel panic on skipped partition
    cvelistv5