In the Linux kernel, the following vulnerability has been resolved:

PCI: mt7621: Add sentinel to quirks table

Current driver is missing a sentinel in the struct soc_device_attribute
array, which causes an oops when assessed by the
soc_device_match(mt7621_pcie_quirks_match) call.

This was only exposed once the CONFIG_SOC_MT7621 mt7621 soc_dev_attr
was fixed to register the SOC as a device, in:

commit 7c18b64bba3b ("mips: ralink: mt7621: do not use kzalloc too early")

Fix it by adding the required sentinel.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00022.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
b483b4e4d3f6bfd5089b9e6dc9ba259879c6ce6f affected < 3e9c395ef2d52975b2c2894d2da09d6db2958bc6
b483b4e4d3f6bfd5089b9e6dc9ba259879c6ce6f affected < cb7323ece786f243f6d6ccf2e5b2b27b736bdc04
b483b4e4d3f6bfd5089b9e6dc9ba259879c6ce6f affected < a4997bae1b5b012c8a6e2643e26578a7bc2cae36
b483b4e4d3f6bfd5089b9e6dc9ba259879c6ce6f affected < 19098934f910b4d47cb30251dd39ffa57bef9523
21fd877300b01d25c5807c327848fdc7c813cf0e affected —
Linux Linux affected
Version Status Constraints
5.5 affected —
0 unaffected < 5.5
5.15.86 unaffected ≤ 5.15.*
6.0.15 unaffected ≤ 6.0.*
6.1.1 unaffected ≤ 6.1.*
6.2 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1.1:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/19098934f910b4d47cb30251dd39ffa57bef9523 cve-icon cve-icon
https://git.kernel.org/stable/c/3e9c395ef2d52975b2c2894d2da09d6db2958bc6 cve-icon cve-icon
https://git.kernel.org/stable/c/a4997bae1b5b012c8a6e2643e26578a7bc2cae36 cve-icon cve-icon
https://git.kernel.org/stable/c/cb7323ece786f243f6d6ccf2e5b2b27b736bdc04 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024102141-CVE-2022-48952-a932@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48952 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48952 cve-icon
History

Fri, 25 Oct 2024 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Fri, 25 Oct 2024 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-131
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Tue, 22 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Oct 2024 13:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 21 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: PCI: mt7621: Add sentinel to quirks table Current driver is missing a sentinel in the struct soc_device_attribute array, which causes an oops when assessed by the soc_device_match(mt7621_pcie_quirks_match) call. This was only exposed once the CONFIG_SOC_MT7621 mt7621 soc_dev_attr was fixed to register the SOC as a device, in: commit 7c18b64bba3b ("mips: ralink: mt7621: do not use kzalloc too early") Fix it by adding the required sentinel.
Title PCI: mt7621: Add sentinel to quirks table
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T12:44:04.996Z

Reserved: 2024-08-22T01:27:53.626Z

Link: CVE-2022-48952

cve-icon Vulnrichment

Updated: 2024-10-22T13:21:33.281Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-21T20:15:06.617

Modified: 2024-10-25T20:09:39.900

Link: CVE-2022-48952

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-10-21T00:00:00Z

Links: CVE-2022-48952 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses