Skip to content
8.1 High

CVE-2022-48655 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to the reset…

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to the reset domains Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave. Add an internal consistency check before any such domains descriptors accesses.

Affected products and versions

Product Affected versions Fixed in
Linux 6.0 earliest → < 6.0 6.0
Linux 5.19 earliest → < 5.19.12 5.19.12
Linux 5.15 earliest → < 5.15.71 5.15.71
Linux 5.10 earliest → < 5.10.218 5.10.218
Linux 5.4 5.4.277
linux_kernel 5.4 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE