Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2022-48853

5.5 · MEDIUM
Published Jul 16, 2024 linux EPSS 0.27% (18th pctl)

Overview

CVE-2022-48853 is a medium-severity vulnerability affecting linux linux_kernel. It was published on July 16, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

swiotlb: fix info leak with DMA_FROM_DEVICE

The problem I'm addressing was discovered by the LTP test covering

cve-2018-1000204.

A short description of what happens follows:

1) The test case issues a command code 00 (TEST UNIT READY) via the SG_IO

interface with: dxfer_len == 524288, dxdfer_dir == SG_DXFER_FROM_DEV

and a corresponding dxferp. The peculiar thing about this is that TUR

is not reading from the device.

2) In sg_start_req() the invocation of blk_rq_map_user() effectively

bounces the user-space buffer. As if the device was to transfer into

it. Since commit a45b599ad808 ("scsi: sg: allocate with __GFP_ZERO in

sg_build_indirect()") we make sure this first bounce buffer is

allocated with GFP_ZERO.

3) For the rest of the story we keep ignoring that we have a TUR, so the

device won't touch the buffer we prepare as if the we had a

DMA_FROM_DEVICE type of situation. My setup uses a vir

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor Product Versions Status
linux linux_kernel >= 0, < 4.9.320 Affected

References

Ref git.kernel.org/stable/c/06cb238b0f7ac1669cb06390704c61794724c191 Ref git.kernel.org/stable/c/7007c894631cf43041dcfa0da7142bbaa7eb673c Ref git.kernel.org/stable/c/901c7280ca0d5e2b4a8929fbe0bfb007ac2a6544 Ref git.kernel.org/stable/c/aaf166f37eb6bb55d81c3e40a2a460c8875c8813 Ref git.kernel.org/stable/c/b2f140a9f980806f572d672e1780acea66b9a25c Ref git.kernel.org/stable/c/dcead36b19d999d687cd9c99b7f37520d9102b57 Ref git.kernel.org/stable/c/f2141881b530738777c28bb51c62175895c8178b Ref git.kernel.org/stable/c/f3f2247ac31cb71d1f05f56536df5946c6652f4a Ref git.kernel.org/stable/c/fd97de9c7b973f46a6103f4170c5efc7b8ef8797 Ref git.kernel.org/stable/c/270475d6d2410ec66e971bf181afe1958dad565e

Frequently Asked Questions

What is CVE-2022-48853?

CVE-2022-48853 is a medium-severity vulnerability affecting linux linux_kernel. It was published on July 16, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2022-48853?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2022-48853?

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2022-48853?

CyberStrike's AI-powered security agents can automatically detect CVE-2022-48853 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.
Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.
Code Review

AI-driven PR review catches vulnerable dependencies before they ship.
HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2022

View all →
6.9
CVE-2021-41236

OroPlatform is a PHP Business Application Platform. In affected versions the email template preview

6.9
CVE-2022-22552

Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unaut

6.9
CVE-2022-22566

Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) v

6.9
CVE-2021-34359

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Ser

6.9
CVE-2022-29813

In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible

6.9
CVE-2022-29814

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON s

6.9
CVE-2022-29815

In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible

6.9
CVE-2022-29819

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was p

6.9
CVE-2022-29821

In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was

6.9
CVE-2022-25842

All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File

6.9
CVE-2022-1803

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1

6.9
CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property t

Browse by year 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999