CVE-2022-48762

In the Linux kernel, the following vulnerability has been resolved: arm64: extable: fix load_unaligned_zeropad() reg indices In ex_handler_load_unaligned_zeropad() we erroneously extract the data and addr register indices from ex->type rather than ex->data. As ex->type will contain EX_TYPE_LOAD_UNALIGNED_ZEROPAD (i.e. 4): * We'll always treat X0 as the address register, since EX_DATA_REG_ADDR is extracted from bits [9:5]. Thus, we may attempt to dereference an arbitrary address as X0 may hold an arbitrary value. * We'll always treat X4 as the data register, since EX_DATA_REG_DATA is extracted from bits [4:0]. Thus we will corrupt X4 and cause arbitrary behaviour within load_unaligned_zeropad() and its caller. Fix this by extracting both values from ex->data as originally intended. On an MTE-enabled QEMU image we are hitting the following crash: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Call trace: fixup_exception+0xc4/0x108 __do_kernel_fault+0x3c/0x268 do_tag_check_fault+0x3c/0x104 do_mem_abort+0x44/0xf4 el1_abort+0x40/0x64 el1h_64_sync_handler+0x60/0xa0 el1h_64_sync+0x7c/0x80 link_path_walk+0x150/0x344 path_openat+0xa0/0x7dc do_filp_open+0xb8/0x168 do_sys_openat2+0x88/0x17c __arm64_sys_openat+0x74/0xa0 invoke_syscall+0x48/0x148 el0_svc_common+0xb8/0xf8 do_el0_svc+0x28/0x88 el0_svc+0x24/0x84 el0t_64_sync_handler+0x88/0xec el0t_64_sync+0x1b4/0x1b8 Code: f8695a69 71007d1f 540000e0 927df12a (f940014a)

• CWE-476

• https://git.kernel.org/stable/c/3758a6c74e08bdc15ccccd6872a6ad37d165239aPatch
• https://git.kernel.org/stable/c/47fe7a1c5e3e011eeb4ab79f2d54a794fdd1c3ebPatch
• https://git.kernel.org/stable/c/3758a6c74e08bdc15ccccd6872a6ad37d165239aPatch
• https://git.kernel.org/stable/c/47fe7a1c5e3e011eeb4ab79f2d54a794fdd1c3ebPatch

Published

Jun 20, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48757In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2022-48758In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-48759In the Linux kernel, the following vulnerability has been re…7
• CVE-2022-4876A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 …6.1
• CVE-2022-48760In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2022-48761In the Linux kernel, the following vulnerability has been re…5.3
• CVE-2022-48763In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-48764In the Linux kernel, the following vulnerability has been re…5.3
• CVE-2022-48765In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-48766In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-48767In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-48768In the Linux kernel, the following vulnerability has been re…5.5