CVE-2022-3628: Buffer Overflow
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.
Other sources
A flaw array-index-out-of-bounds in the Linux Kernel found in drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c. When attaching malicious USB device, buffer overflow could happen in the Broadcom Full MAC Wi-Fi driver. The bug occurs in brcmffweheventworker, when emsg.bsscfgidx, data from an URB provided by a USB device, is bigger than the size of the array drvr->iflist.
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c?id=6788ba8aed4e28e90f72d68a9d794e34eac17295 https://seclists.org/oss-sec/2022/q4/60
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-477.10.1.rt7.274.el8_8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-477.10.1.el8_8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.el9_2 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.rt14.296.el9_2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
redhat/Linux kernelto a version that resolves this vulnerability.Fixed in 6.1 - Configuration
Blacklist the brcmfmac module to prevent it from loading automatically.
Linux kernel brcmfmac module module loading = disabled
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-3628?
CVE-2022-3628 has a severity rating that indicates it poses a significant risk due to potential privilege escalation and system crashes.
How do I fix CVE-2022-3628?
To fix CVE-2022-3628, you should upgrade to the appropriate patched kernel versions provided by your distribution.
What systems are affected by CVE-2022-3628?
CVE-2022-3628 affects various Linux kernel versions including specific releases of Red Hat and Debian kernels.
What type of vulnerability is CVE-2022-3628?
CVE-2022-3628 is a buffer overflow vulnerability that can be exploited through malicious USB devices.
Can CVE-2022-3628 lead to remote attacks?
CVE-2022-3628 is primarily a local vulnerability, requiring access to the system to exploit.