CVE Database›CVE-2022-48762

CVE-2022-48762

kernel: arm64: extable: fix load_unaligned_zeropad() reg indices

Loading…

Severity

Low

Red Hat Product Security

4.1

CVSS 3.1

Review impact separately from score.

Published · June 20, 2024

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's ARM64 architecture support. This vulnerability allows a local user to cause a Denial of Service (DoS) by triggering a kernel crash. The issue occurs because the exception handler for unaligned memory reads incorrectly extracts register indices from exception tables. As a result, the kernel may attempt to dereference an arbitrary memory address or corrupt register values, leading to system instability or a crash.

Statement

This vulnerability is rated as having Low severity for Red Hat because exploitation is constrained to local access on 64-bit ARM architectures and results strictly in a denial of service. The issue requires specific faulting conditions during an unaligned zero-padded memory operation to trigger improper register index handling in the kernel exception table. Consequently, an attacker cannot achieve arbitrary code execution or elevate privileges, limiting the blast radius to a system crash.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference