CVE-2022-48972: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
In the Linux kernel, the following vulnerability has been resolved:
mac802154: fix missing INITLISTHEAD in ieee802154ifadd()
Kernel fault injection test reports null-ptr-deref as follows:
BUG: kernel NULL pointer dereference, address: 0000000000000008 RIP: 0010:cfg802154netdevnotifiercall+0x120/0x310 include/linux/list.h:114 Call Trace: <TASK> rawnotifiercallchain+0x6d/0xa0 kernel/notifier.c:87 callnetdevicenotifiersinfo+0x6e/0xc0 net/core/dev.c:1944 unregisternetdevicemanynotify+0x60d/0xcb0 net/core/dev.c:1982 unregisternetdevicequeue+0x154/0x1a0 net/core/dev.c:10879 registernetdevice+0x9a8/0xb90 net/core/dev.c:10083 ieee802154ifadd+0x6ed/0x7e0 net/mac802154/iface.c:659 ieee802154registerhw+0x29c/0x330 net/mac802154/main.c:229 mcr20aprobe+0xaaa/0xcb1 drivers/net/ieee802154/mcr20a.c:1316
ieee802154ifadd() allocates wpandev as netdev's private data, but not init the list in struct wpandev. cfg802154netdevnotifiercall() manage the list when device register/unregister, and may lead to null-ptr-deref.
Use INITLISTHEAD() on it to initialize it correctly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48972?
CVE-2022-48972 is classified as a medium severity vulnerability in the Linux kernel that can lead to kernel NULL pointer dereference.
How do I fix CVE-2022-48972?
To fix CVE-2022-48972, upgrade your Linux kernel to a version that addresses the vulnerability, as specified in security advisories.
What versions of the Linux kernel are affected by CVE-2022-48972?
CVE-2022-48972 affects various versions of the Linux kernel, specifically those from 3.19 to 6.1-rc8.
Is CVE-2022-48972 exploitable in production environments?
Yes, CVE-2022-48972 can be exploitable in production environments, potentially leading to system instability.
What components are primarily impacted by CVE-2022-48972?
CVE-2022-48972 primarily impacts the mac802154 subsystem in the Linux kernel.