CVE-2022-48804

vt_ioctl: fix array_index_nospec in vt_setactivate

State: Published
Severity: Not scored
Published: Jul 16, 2024
Updated: May 23, 2026
Reserved: Jul 16, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

vt_ioctl: fix array_index_nospec in vt_setactivate

array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec.

Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0ec459ec174031fad02a55e622cf2fc0d2e75a25 to before 830c5aa302ec16b4ee641aec769462c37f802c90Affected 4334a6ae867aa12f01c1755368fd0de4c926ac75 to before 2a45a6bd1e6d651770aafff57ab3e1d3bb0b42e0Affected e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 170325aba4608bde3e7d21c9c19b7bc266ac0885Affected e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before ae3d57411562260ee3f4fd5e875f410002341104Affected e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 778302ca09498b448620edd372dc908bebf80bdfAffected e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before ffe54289b02e9c732d6f04c8ebbe3b2d90d32118Affected e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 6550bdf52846f85a2a3726a5aa0c7c4399f2fc02Affected e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 61cc70d9e8ef5b042d4ed87994d20100ec8896d9Affected 458697ab18b512445ac273ce68a9f8fd623fc0a3Affected 1aa698b65186c13ed775896ed1dfec7c26c73d60Affected 52ef74c21c277e50de771fc722d814a830b3036bAffected 4.9.130 to before 4.9.302Affected 4.14.73 to before 4.14.267Affected 3.16.62 to before 3.17Affected 4.4.159 to before 4.5Affected 4.18.11 to before 4.19Affected
LinuxLinux	4.19Affected before 4.19Not affected 4.9.302 through 4.9.Not affected 4.14.267 through 4.14.Not affected 4.19.230 through 4.19.Not affected 5.4.180 through 5.4.Not affected 5.10.101 through 5.10.Not affected 5.15.24 through 5.15.Not affected 5.16.10 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

0ec459ec174031fad02a55e622cf2fc0d2e75a25 to before 830c5aa302ec16b4ee641aec769462c37f802c90Affected
4334a6ae867aa12f01c1755368fd0de4c926ac75 to before 2a45a6bd1e6d651770aafff57ab3e1d3bb0b42e0Affected
e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 170325aba4608bde3e7d21c9c19b7bc266ac0885Affected
e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before ae3d57411562260ee3f4fd5e875f410002341104Affected
e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 778302ca09498b448620edd372dc908bebf80bdfAffected
e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before ffe54289b02e9c732d6f04c8ebbe3b2d90d32118Affected
e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 6550bdf52846f85a2a3726a5aa0c7c4399f2fc02Affected
e97267cb4d1ee01ca0929638ec0fcbb0904f903d to before 61cc70d9e8ef5b042d4ed87994d20100ec8896d9Affected
458697ab18b512445ac273ce68a9f8fd623fc0a3Affected
1aa698b65186c13ed775896ed1dfec7c26c73d60Affected
52ef74c21c277e50de771fc722d814a830b3036bAffected
4.9.130 to before 4.9.302Affected
4.14.73 to before 4.14.267Affected
3.16.62 to before 3.17Affected
4.4.159 to before 4.5Affected
4.18.11 to before 4.19Affected

LinuxLinux

4.19Affected
before 4.19Not affected
4.9.302 through 4.9.*Not affected
4.14.267 through 4.14.*Not affected
4.19.230 through 4.19.*Not affected
5.4.180 through 5.4.*Not affected
5.10.101 through 5.10.*Not affected
5.15.24 through 5.15.*Not affected
5.16.10 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.