Riskcovery

CVE-2022-48638

cgroup: cgroup_get_from_id() must check the looked-up kn is a directory

State
Published
Severity
5.3 Medium
Published
Apr 28, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cgroup: cgroup_get_from_id() must check the looked-up kn is a directory

cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6b658c4863c15936872a93c9ee879043bf6393c9 to before 8484a356cee8ce3d6a8e6266ff99be326e9273adAffected
  • 6b658c4863c15936872a93c9ee879043bf6393c9 to before 1e9571887f97b17cf3ffe9aa4da89090ea60988bAffected
  • 6b658c4863c15936872a93c9ee879043bf6393c9 to before df02452f3df069a59bc9e69c84435bf115cb6e37Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.72 through 5.15.*Not affected
  • 5.19.12 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.