CVE-2022-48630

The commit referenced in the Fixes tag removed the 'break' from the else branch in qcomrngread(), causing an infinite loop whenever 'max' is not a multiple of WORD_SZ. This can be reproduced e.g. by running:

kcapi-rng -b 67 >/dev/null

There are many ways to fix this without adding back the 'break', but they all seem more awkward than simply adding it back, so do just that.

Tested on a machine with Qualcomm Amberwing processor.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48630.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a8e32bbb96c25b7ab29b1894dcd45e0b3b08fd9d

Fixed

71a89789552b7faf3ef27969b9bc783fa0df3550

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

184f7bd08ce56f003530fc19f160d54e75bf5c9d

Fixed

8be06f62b426801dba43ddf8893952a0e62ab6ae

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

0f9b7b8df17525e464294c916acc8194ce38446b

Fixed

233a3cc60e7a8fe0be8cf9934ae7b67ba25a866c

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

ab9337c7cb6f875b6286440b1adfbeeef2b2b2bd

Fixed

8a06f25f5941c145773204f2f7abef95b4ffb8ce

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a680b1832ced3b5fa7c93484248fd221ea0d614b

Fixed

05d4d17475d8d094c519bb51658bc47899c175e3

Fixed

16287397ec5c08aa58db6acf7dbc55470d78087d

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

485995cbc98a4f77cfd4f8ed4dd7ff8ab262964d

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48630.json"