CVE-2022-48967

NFC: nci: Bounds check struct nfc_target arrays

Description

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported: memcpy: detected field-spanning write (size 129) of single field "target->sensf_res" at net/nfc/nci/ntf.c:260 (size 18) This appears to be a legitimate lack of bounds checking in nci_add_new_protocol(). Add the missing checks.

Category

7.1
CVSS
Severity: High
CVSS 3.1 •
EPSS 0.03%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/6b37f0dc0638d13a006f2f24d2f6ca61e83bc714 patch
https://git.kernel.org/stable/c/dbdcfb9f6748218a149f62468d6297ce3f014e9c patch
https://git.kernel.org/stable/c/cff35329070b96b4484d23f9f48a5ca2c947e750 patch
https://git.kernel.org/stable/c/6778434706940b8fad7ef35f410d2b9929f256d2 patch
https://git.kernel.org/stable/c/27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9 patch
https://git.kernel.org/stable/c/908b2da426fe9c3ce74cf541ba40e7a4251db191 patch
https://git.kernel.org/stable/c/f41547546db9af99da2c34e3368664d7a79cefae patch
https://git.kernel.org/stable/c/e329e71013c9b5a4535b099208493c7826ee4a64 patch

Frequently Asked Questions

What is the severity of CVE-2022-48967?
CVE-2022-48967 has been scored as a high severity vulnerability.
How to fix CVE-2022-48967?
To fix CVE-2022-48967, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-48967 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-48967 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-48967?
CVE-2022-48967 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.