In the Linux kernel, the following vulnerability has been resolved:

vt_ioctl: fix array_index_nospec in vt_setactivate

array_index_nospec ensures that an out-of-bounds value is set to zero
on the transient path. Decreasing the value by one afterwards causes
a transient integer underflow. vsa.console should be decreased first
and then sanitized with array_index_nospec.

Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh
Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU
Amsterdam.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00014.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
0ec459ec174031fad02a55e622cf2fc0d2e75a25 affected < 830c5aa302ec16b4ee641aec769462c37f802c90
4334a6ae867aa12f01c1755368fd0de4c926ac75 affected < 2a45a6bd1e6d651770aafff57ab3e1d3bb0b42e0
e97267cb4d1ee01ca0929638ec0fcbb0904f903d affected < 170325aba4608bde3e7d21c9c19b7bc266ac0885
e97267cb4d1ee01ca0929638ec0fcbb0904f903d affected < ae3d57411562260ee3f4fd5e875f410002341104
e97267cb4d1ee01ca0929638ec0fcbb0904f903d affected < 778302ca09498b448620edd372dc908bebf80bdf
e97267cb4d1ee01ca0929638ec0fcbb0904f903d affected < ffe54289b02e9c732d6f04c8ebbe3b2d90d32118
e97267cb4d1ee01ca0929638ec0fcbb0904f903d affected < 6550bdf52846f85a2a3726a5aa0c7c4399f2fc02
e97267cb4d1ee01ca0929638ec0fcbb0904f903d affected < 61cc70d9e8ef5b042d4ed87994d20100ec8896d9
458697ab18b512445ac273ce68a9f8fd623fc0a3 affected —
1aa698b65186c13ed775896ed1dfec7c26c73d60 affected —
52ef74c21c277e50de771fc722d814a830b3036b affected —
Linux Linux affected
Version Status Constraints
4.19 affected —
0 unaffected < 4.19
4.9.302 unaffected ≤ 4.9.*
4.14.267 unaffected ≤ 4.14.*
4.19.230 unaffected ≤ 4.19.*
5.4.180 unaffected ≤ 5.4.*
5.10.101 unaffected ≤ 5.10.*
5.15.24 unaffected ≤ 5.15.*
5.16.10 unaffected ≤ 5.16.*
5.17 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:7001 2024-09-24T00:00:00Z
kernel-0:4.18.0-553.22.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:7000 2024-09-24T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
Red Hat Enterprise Linux 9.4 Extended Update Support
kernel-0:5.14.0-427.47.1.el9_4 cpe:/a:redhat:rhel_eus:9.4 RHSA-2024:10771 2024-12-04T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Rhel Eus Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/170325aba4608bde3e7d21c9c19b7bc266ac0885 cve-icon cve-icon
https://git.kernel.org/stable/c/2a45a6bd1e6d651770aafff57ab3e1d3bb0b42e0 cve-icon cve-icon
https://git.kernel.org/stable/c/61cc70d9e8ef5b042d4ed87994d20100ec8896d9 cve-icon cve-icon
https://git.kernel.org/stable/c/6550bdf52846f85a2a3726a5aa0c7c4399f2fc02 cve-icon cve-icon
https://git.kernel.org/stable/c/778302ca09498b448620edd372dc908bebf80bdf cve-icon cve-icon
https://git.kernel.org/stable/c/830c5aa302ec16b4ee641aec769462c37f802c90 cve-icon cve-icon
https://git.kernel.org/stable/c/ae3d57411562260ee3f4fd5e875f410002341104 cve-icon cve-icon
https://git.kernel.org/stable/c/ffe54289b02e9c732d6f04c8ebbe3b2d90d32118 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024071645-CVE-2022-48804-f191@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48804 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48804 cve-icon
History

Wed, 04 Dec 2024 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.4
Vendors & Products Redhat rhel Eus

Wed, 13 Nov 2024 02:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Tue, 24 Sep 2024 11:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8

Tue, 24 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 09 Sep 2024 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-191
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 29 Aug 2024 22:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-23T13:20:34.269Z

Reserved: 2024-07-16T11:38:08.896Z

Link: CVE-2022-48804

cve-icon Vulnrichment

Updated: 2024-08-03T15:25:01.606Z

cve-icon NVD

Status : Modified

Published: 2024-07-16T12:15:04.830

Modified: 2024-11-21T07:34:07.233

Link: CVE-2022-48804

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-16T00:00:00Z

Links: CVE-2022-48804 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses