CVE-2022-48762
kernel: arm64: extable: fix load_unaligned_zeropad() reg indices
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 20, 2024
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's ARM64 architecture support. This vulnerability allows a local user to cause a Denial of Service (DoS) by triggering a kernel crash. The issue occurs because the exception handler for unaligned memory reads incorrectly extracts register indices from exception tables. As a result, the kernel may attempt to dereference an arbitrary memory address or corrupt register values, leading to system instability or a crash.
Statement
This vulnerability is rated as having Low severity for Red Hat because exploitation is constrained to local access on 64-bit ARM architectures and results strictly in a denial of service. The issue requires specific faulting conditions during an unaligned zero-padded memory operation to trigger improper register index handling in the kernel exception table. Consequently, an attacker cannot achieve arbitrary code execution or elevate privileges, limiting the blast radius to a system crash.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.1CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference