In the Linux kernel, the following vulnerability has been resolved:
can: afcan: fix NULL pointer dereference in canrcv_filter
Analogue to commit 8aa59e355949 ("can: afcan: fix NULL pointer dereference in canrxregister()") we need to check for a missing initialization of mlpriv in the receive path of CAN frames.
Since commit 4e096a18867a ("net: introduce CAN specific pointer in the struct netdevice") the check for dev->type to be ARPHRDCAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48977.json",
"cna_assigner": "Linux"
}[
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c"
},
"id": "CVE-2022-48977-1655cac8",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3982652957e8d79ac32efcb725450580650a8644",
"digest": {
"line_hashes": [
"46641929558154260376341088468534859248",
"58674700229405624064507900817499659126",
"133332525723570994058642420695107074521",
"280845545898594662852468489149996038780",
"310879591325697067425589781551490228081",
"330396104130579382066722937809668854996",
"298799587526831225880542348124562883246",
"178208249923718346084164086425638218843"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c",
"function": "canfd_rcv"
},
"id": "CVE-2022-48977-6ed439f6",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0acc442309a0a1b01bcdaa135e56e6398a49439c",
"digest": {
"function_hash": "280348395554017643511288583668861890624",
"length": 379.0
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c",
"function": "can_rcv"
},
"id": "CVE-2022-48977-6fbe1016",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c42221efb1159d6a3c89e96685ee38acdce86b6f",
"digest": {
"function_hash": "10675514181566400926986374531605063680",
"length": 645.0
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c"
},
"id": "CVE-2022-48977-82e152e7",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c42221efb1159d6a3c89e96685ee38acdce86b6f",
"digest": {
"line_hashes": [
"46641929558154260376341088468534859248",
"58674700229405624064507900817499659126",
"133332525723570994058642420695107074521",
"280845545898594662852468489149996038780",
"310879591325697067425589781551490228081",
"330396104130579382066722937809668854996",
"298799587526831225880542348124562883246",
"178208249923718346084164086425638218843"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c",
"function": "can_rcv"
},
"id": "CVE-2022-48977-98fba310",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0acc442309a0a1b01bcdaa135e56e6398a49439c",
"digest": {
"function_hash": "219280534643047717248331279312603298098",
"length": 376.0
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c"
},
"id": "CVE-2022-48977-9aba3e40",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0acc442309a0a1b01bcdaa135e56e6398a49439c",
"digest": {
"line_hashes": [
"292098128479755673776259164589411840863",
"158645571619333142958694706915305955715",
"152560478019173915612715616996508281619",
"110560302054653610260431494520537677842",
"43382372443095277103745927726256391399",
"152772072941713723570979251194829423479",
"210846540598758385991683110255405263759",
"337003575650445820082741543833087053187",
"114905909998312510652234057518881645409",
"290019316463746489053163009210766806429",
"320789160142049148623363018133195749683",
"62388600417709173495895698661678085580"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c",
"function": "canfd_rcv"
},
"id": "CVE-2022-48977-b8557b41",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3982652957e8d79ac32efcb725450580650a8644",
"digest": {
"function_hash": "128974159703995072170972098767760066265",
"length": 655.0
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c",
"function": "can_rcv"
},
"id": "CVE-2022-48977-c2344b39",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3982652957e8d79ac32efcb725450580650a8644",
"digest": {
"function_hash": "10675514181566400926986374531605063680",
"length": 645.0
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c",
"function": "canfd_rcv"
},
"id": "CVE-2022-48977-c40e9ca1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c42221efb1159d6a3c89e96685ee38acdce86b6f",
"digest": {
"function_hash": "128974159703995072170972098767760066265",
"length": 655.0
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "net/can/af_can.c",
"function": "canxl_rcv"
},
"id": "CVE-2022-48977-facd2fc5",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0acc442309a0a1b01bcdaa135e56e6398a49439c",
"digest": {
"function_hash": "248063872516807731883542443386320599900",
"length": 379.0
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48977.json"