In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix off by one in BIOS boundary checking
Bounds checking when parsing init scripts embedded in the BIOS reject access to the last byte. This causes driver initialization to fail on Apple eMac's with GeForce 2 MX GPUs, leaving the system with no working console.
This is probably only seen on OpenFirmware machines like PowerPC Macs because the BIOS image provided by OF is only the used parts of the ROM, not a power-of-two blocks read from PCI directly so PCs always have empty bytes at the end that are never accessed.
[
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@909d3ec1bf9f0ec534bfc081b77c0836fea7b0e2",
"deprecated": false,
"id": "CVE-2022-48732-0730a8d2",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4b746e60fd8eaa8016e144223abe91158edcdad",
"deprecated": false,
"id": "CVE-2022-48732-0c6fbfd9",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@909d3ec1bf9f0ec534bfc081b77c0836fea7b0e2",
"deprecated": false,
"id": "CVE-2022-48732-172c2b31",
"signature_type": "Line"
},
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d877e814a62b7de9069aeff8bc1d979dfc996e06",
"deprecated": false,
"id": "CVE-2022-48732-2603ae9c",
"signature_type": "Function"
},
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4b746e60fd8eaa8016e144223abe91158edcdad",
"deprecated": false,
"id": "CVE-2022-48732-32ceb857",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@acc887ba88333f5fec49631f12d8cc7ebd95781c",
"deprecated": false,
"id": "CVE-2022-48732-42970fdb",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7c36fa8a1e63b08312162179c78a0c7795ea369",
"deprecated": false,
"id": "CVE-2022-48732-438844b6",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d877e814a62b7de9069aeff8bc1d979dfc996e06",
"deprecated": false,
"id": "CVE-2022-48732-4713da18",
"signature_type": "Line"
},
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f071d9fa857582d7bd77f4906691f73d3edeab73",
"deprecated": false,
"id": "CVE-2022-48732-6fedce4f",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b777d4d9e383d2744fc9b3a09af6ec1893c8b1a",
"deprecated": false,
"id": "CVE-2022-48732-84cb7a67",
"signature_type": "Line"
},
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2a21669ee98aafc41c6d42ef15af4dab9e6e882",
"deprecated": false,
"id": "CVE-2022-48732-871097cc",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2a21669ee98aafc41c6d42ef15af4dab9e6e882",
"deprecated": false,
"id": "CVE-2022-48732-b8ee2219",
"signature_type": "Line"
},
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@acc887ba88333f5fec49631f12d8cc7ebd95781c",
"deprecated": false,
"id": "CVE-2022-48732-c6da55d8",
"signature_type": "Function"
},
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7c36fa8a1e63b08312162179c78a0c7795ea369",
"deprecated": false,
"id": "CVE-2022-48732-e8f46d8d",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"194313258899704953356345696522452161985",
"146208733873738595171240252553840520094",
"40896447280853423834114582069345487125",
"36748179396402743798154103218743380652"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f071d9fa857582d7bd77f4906691f73d3edeab73",
"deprecated": false,
"id": "CVE-2022-48732-fc90bb79",
"signature_type": "Line"
},
{
"digest": {
"length": 396.0,
"function_hash": "48633014557098842312733200020464463265"
},
"target": {
"function": "nvbios_addr",
"file": "drivers/gpu/drm/nouveau/nvkm/subdev/bios/base.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b777d4d9e383d2744fc9b3a09af6ec1893c8b1a",
"deprecated": false,
"id": "CVE-2022-48732-fefe7cae",
"signature_type": "Function"
}
]