Critical Vulnerability in Linux Kernel: PCI mt7621 Quirks Table Omission
Summary
CVE-2022-48952: In the Linux kernel, the following vulnerability has been resolved: PCI: mt7621: Add sentinel to quirks table Current driver is missing a sentinel in the struct soc_device_attribute array, which causes an oops when asses... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its robustness and flexibility, supporting a wide range of hardware architectures. The kernel's PCI subsystem is crucial for managing peripheral devices, and any vulnerabilities within it can lead to significant system instability or security risks. This specific vulnerability affects the mt7621 platform, which is utilized in various networking devices and embedded systems.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the PCI subsystem related to the mt7621 platform. The issue arises from a missing sentinel in the struct soc_device_attribute array, which leads to a system crash (oops) when the soc_device_match function is called. This vulnerability was exposed after a fix was applied to register the SOC as a device, revealing the oversight in the quirks table. The ramifications of this vulnerability include potential system crashes and instability, particularly for devices relying on the mt7621 architecture.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The CVE-2022-48952 vulnerability in the Linux kernel poses a significant risk to systems using the mt7621 platform. It is crucial for users to update their kernel to the patched version to prevent potential system crashes and ensure stability. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
CVE-2022-48952 is a vulnerability in the Linux kernel's PCI subsystem affecting the mt7621 platform, caused by a missing sentinel in the quirks table.
The vulnerability can lead to system crashes and instability, particularly in devices using the mt7621 architecture.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in the form of the Linux kernel version 6.1.4-1 for Debian systems.
While there are no specific workarounds, it is advisable to prioritize updating your kernel to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
