{
  "cveId": "CVE-2022-48762",
  "url": "https://patchblox.com/security/cve/CVE-2022-48762",
  "summary": "CVE-2022-48762 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48762, released June 20, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: extable: fix load_unaligned_zeropad() reg...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  arm64: extable: fix load_unaligned_zeropad() reg indices  In ex_handler_load_unaligned_zeropad() we erroneously extract the data and addr register indices from ex-\u003Etype rather than ex-\u003Edata. As ex-\u003Etype will contain EX_TYPE_LOAD_UNALIGNED_ZEROPAD (i.e. 4):  * We\u0027ll always treat X0 as the address register, since EX_DATA_REG_ADDR is    extracted from bits [9:5]. Thus, we may attempt to dereference an    arbitrary address as X0 may hold an arbitrary value.  * We\u0027ll always treat X4 as the data register, since EX_DATA_REG_DATA is    extracted from bits [4:0]. Thus we will corrupt X4 and cause arbitrary    behaviour within load_unaligned_zeropad() and its caller.  Fix this by extracting both values from ex-\u003Edata as originally intended.  On an MTE-enabled QEMU image we are hitting the following crash:  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000  Call trace:   fixup_exception\u002B0xc4/0x108   __do_kernel_fault\u002B0x3c/0x268   do_tag_check_fault\u002B0x3c/0x104   do_mem_abort\u002B0x44/0xf4   el1_abort\u002B0x40/0x64   el1h_64_sync_handler\u002B0x60/0xa0   el1h_64_sync\u002B0x7c/0x80   link_path_walk\u002B0x150/0x344   path_openat\u002B0xa0/0x7dc   do_filp_open\u002B0xb8/0x168   do_sys_openat2\u002B0x88/0x17c   __arm64_sys_openat\u002B0x74/0xa0   invoke_syscall\u002B0x48/0x148   el0_svc_common\u002B0xb8/0xf8   do_el0_svc\u002B0x28/0x88   el0_svc\u002B0x24/0x84   el0t_64_sync_handler\u002B0x88/0xec   el0t_64_sync\u002B0x1b4/0x1b8  Code: f8695a69 71007d1f 540000e0 927df12a (f940014a)",
  "published": "2024-06-20T12:15:14Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00191,
  "epssPercentile": 0.08822,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.16.7-1",
      "fix": "DEBIAN-CVE-2022-48762",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48762",
      "released": "2024-06-20T12:15:14Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.16.7-1",
      "fix": "DEBIAN-CVE-2022-48762",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48762",
      "released": "2024-06-20T12:15:14Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.16.7-1",
      "fix": "DEBIAN-CVE-2022-48762",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48762",
      "released": "2024-06-20T12:15:14Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}