In the Linux kernel, the following vulnerability has been resolved:

can: af_can: fix NULL pointer dereference in can_rcv_filter

Analogue to commit 8aa59e355949 ("can: af_can: fix NULL pointer
dereference in can_rx_register()") we need to check for a missing
initialization of ml_priv in the receive path of CAN frames.

Since commit 4e096a18867a ("net: introduce CAN specific pointer in the
struct net_device") the check for dev->type to be ARPHRD_CAN is not
sufficient anymore since bonding or tun netdevices claim to be CAN
devices but do not initialize ml_priv accordingly.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00016.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
4ac1feff6ea6495cbfd336f4438a6c6d140544a6 affected
< 3982652957e8d79ac32efcb725450580650a8644
1a5751d58b14195f763b8c1d9ef33fb8a93e95e7 affected
< c42221efb1159d6a3c89e96685ee38acdce86b6f
4e096a18867a5a989b510f6999d9c6b6622e8f7b affected
< c142cba37de29f740a3852f01f59876af8ae462a
4e096a18867a5a989b510f6999d9c6b6622e8f7b affected
< fcc63f2f7ee3038d53216edd0d8291e57c752557
4e096a18867a5a989b510f6999d9c6b6622e8f7b affected
< 0acc442309a0a1b01bcdaa135e56e6398a49439c
96340078d50a54f6a1252c62596bc44321c8bff9 affected
—
Linux Linux affected
Version Status Constraints
5.12 affected
—
0 unaffected
< 5.12
5.4.227 unaffected
≤ 5.4.*
5.10.159 unaffected
≤ 5.10.*
5.15.83 unaffected
≤ 5.15.*
6.0.13 unaffected
≤ 6.0.*
6.1 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0acc442309a0a1b01bcdaa135e56e6398a49439c cve-icon cve-icon
https://git.kernel.org/stable/c/3982652957e8d79ac32efcb725450580650a8644 cve-icon cve-icon
https://git.kernel.org/stable/c/c142cba37de29f740a3852f01f59876af8ae462a cve-icon cve-icon
https://git.kernel.org/stable/c/c42221efb1159d6a3c89e96685ee38acdce86b6f cve-icon cve-icon
https://git.kernel.org/stable/c/fcc63f2f7ee3038d53216edd0d8291e57c752557 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024102145-CVE-2022-48977-0990@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48977 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48977 cve-icon
History

Fri, 25 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Tue, 22 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Oct 2024 13:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 21 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: can: af_can: fix NULL pointer dereference in can_rcv_filter Analogue to commit 8aa59e355949 ("can: af_can: fix NULL pointer dereference in can_rx_register()") we need to check for a missing initialization of ml_priv in the receive path of CAN frames. Since commit 4e096a18867a ("net: introduce CAN specific pointer in the struct net_device") the check for dev->type to be ARPHRD_CAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly.
Title can: af_can: fix NULL pointer dereference in can_rcv_filter
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T12:44:07.541Z

Reserved: 2024-08-22T01:27:53.632Z

Link: CVE-2022-48977

cve-icon Vulnrichment

Updated: 2024-10-22T13:18:24.154Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-21T20:15:09.763

Modified: 2024-10-25T18:47:07.357

Link: CVE-2022-48977

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-10-21T00:00:00Z

Links: CVE-2022-48977 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses