What is CVE-2022-48877?

CVE-2022-48877 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 3.8 onward and patched in 4.14.304, 4.19.271, 5.4.230 and others. CVE-2022-48877 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2022-48877?

CVE-2022-48877 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2022-48877?

Yes, CVE-2022-48877 has been patched. Fixed versions include 4.14.304, 4.19.271, 5.4.230 and others. If you are running Linux kernel 3.8 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2022-48877 actively exploited?

CVE-2022-48877 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2022-48877

Medium

In the Linux kernel, the following vulnerability has been resolved: f2fs: let's avoid panic if extent_tree is not created This patch avoids the below panic. pc : __lookup_extent_tree+0xd8/0x760 lr : f2fs_do_write_data_page+0x104/0x87c sp : ffffffc010cbb3c0 x29: ffffffc010cbb3e0 x28: 0000000000000000 x27: ffffff8803e7f020 x26: ffffff8803e7ed40 x25: ffffff8803e7f020 x24: ffffffc010cbb460 x23: ffffffc010cbb480 x22: 0000000000000000 x21: 0000000000000000 x20: ffffffff22e90900 x19: 0000000000000000 x18: ffffffc010c5d080 x17: 0000000000000000 x16: 0000000000000020 x15: ffffffdb1acdbb88 x14: ffffff888759e2b0 x13: 0000000000000000 x12: ffffff802da49000 x11: 000000000a001200 x10: ffffff8803e7ed40 x9 : ffffff8023195800 x8 : ffffff802da49078 x7 : 0000000000000001 x6 : 0000000000000000 x5 : 0000000000000006 x4 : ffffffc010cbba28 x3 : 0000000000000000 x2 : ffffffc010cbb480 x1 : 0000000000000000 x0 : ffffff8803e7ed40 Call trace: __lookup_extent_tree+0xd8/0x760 f2fs_do_write_data_page+0x104/0x87c f2fs_write_single_data_page+0x420/0xb60 f2fs_write_cache_pages+0x418/0xb1c __f2fs_write_data_pages+0x428/0x58c f2fs_write_data_pages+0x30/0x40 do_writepages+0x88/0x190 __writeback_single_inode+0x48/0x448 writeback_sb_inodes+0x468/0x9e8 __writeback_inodes_wb+0xb8/0x2a4 wb_writeback+0x33c/0x740 wb_do_writeback+0x2b4/0x400 wb_workfn+0xe4/0x34c process_one_work+0x24c/0x5bc worker_thread+0x3e8/0xa50 kthread+0x150/0x1b4

Package Linux Kernel

Published 2024-08-21

Last modified 2024-09-05

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 3.8 and later are affected. Fixed in 4.14.304, 4.19.271, 5.4.230, 5.10.165, 5.15.90, 6.1.8, 6.2 and their respective stable series.

Affected from

≥ 3.8

Fixed in

✓ 4.14.304 4.14.x ✓ 4.19.271 4.19.x ✓ 5.4.230 5.4.x ✓ 5.10.165 5.10.x ✓ 5.15.90 5.15.x ✓ 6.1.8 6.1.x ✓ 6.2

References

The following references provide additional information about CVE-2022-48877 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/1c38cdc747f00daf7394535eae5afc4c503c59bb
Patch
Kernel patch commit
https://git.kernel.org/stable/c/2c129e868992621a739bdd57a5bffa3985ef1b91
Patch
Kernel patch commit
https://git.kernel.org/stable/c/557e85ff9afef6d45020b6f09357111d38033c31
Patch

7 patch commits total View all on NVD

Details

CVE ID CVE-2022-48877

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-08-21

Modified 2024-09-05

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2022-48877?

CVE-2022-48877 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 3.8 onward and has been patched in 4.14.304, 4.19.271, 5.4.230 and others. CVE-2022-48877 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2022-48877?

CVE-2022-48877 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2022-48877?

Yes — CVE-2022-48877 has been patched. Fixed versions include 4.14.304, 4.19.271, 5.4.230 and others. If you are running Linux kernel 3.8 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2022-48877 actively exploited?

No — CVE-2022-48877 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.