CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays
In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: Bounds check struct nfctarget arrays
While running under CONFIGFORTIFYSOURCE=y, syzkaller reported:
memcpy: detected field-spanning write (size 129) of single field "target->sensfres" at net/nfc/nci/ntf.c:260 (size 18)
This appears to be a legitimate lack of bounds checking in nciaddnewprotocol(). Add the missing checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48967?
The severity of CVE-2022-48967 is classified as medium, as it involves a vulnerability in the NFC subsystem of the Linux kernel.
How do I fix CVE-2022-48967?
To fix CVE-2022-48967, update your Linux kernel to the latest version that addresses this vulnerability.
Which Linux kernel versions are affected by CVE-2022-48967?
CVE-2022-48967 affects Linux kernel versions between 3.4 and 6.1-rc8, excluding specific patched versions.
What type of vulnerability is CVE-2022-48967?
CVE-2022-48967 is a bounds check vulnerability in the NFC: nci subsystem of the Linux kernel.
What impact does CVE-2022-48967 have on system security?
CVE-2022-48967 could potentially allow an attacker to exploit memory corruption, leading to possible system instability or unauthorized access.