CVE-2022-50497
Description
In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: fix shift-out-of-bounds in check_special_flags UBSAN reported a shift-out-of-bounds warning: left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8d/0xcf lib/dump_stack.c:106 ubsan_epilogue+0xa/0x44 lib/ubsan.c:151 __ubsan_handle_shift_out_of_bounds+0x1e7/0x208 lib/ubsan.c:322 check_special_flags fs/binfmt_misc.c:241 [inline] create_entry fs/binfmt_misc.c:456 [inline] bm_register_write+0x9d3/0xa20 fs/binfmt_misc.c:654 vfs_write+0x11e/0x580 fs/read_write.c:582 ksys_write+0xcf/0x120 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x34/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x4194e1 Since the type of Node's flags is unsigned long, we should define these macros with same type too.
How to fix
- linux linux_kernel4.9.337, 4.14.303, 4.19.270, 5.4.229, 5.10.163, 5.15.86, 6.0.16, 6.1.2 or later
- git.kernel.org/stable/c/0f1a48994b3e516d5c7fd5d12204fdba7a604771
- git.kernel.org/stable/c/419b808504c26b3e3342365f34ccd0843e09a7f8
- git.kernel.org/stable/c/6a46bf558803dd2b959ca7435a5c143efe837217
- git.kernel.org/stable/c/88cea1676a09f7c45a1438153a126610c33b1590
- git.kernel.org/stable/c/97382a2639b1cd9631f6069061e9d7062cd2b098
- git.kernel.org/stable/c/a651bb5ff997b9f02662bcdef3d8b4e6f0d79656
- git.kernel.org/stable/c/a91123d4bda463469f68f0427adabf8108001f94
- git.kernel.org/stable/c/dcbc51d31d0afbd45e830e3cf565a7b3ca7bf0d8
- git.kernel.org/stable/c/ea6145370be8016755c43aca799815fc4b8c88b1
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 2.6.12.1 ≤ v < 4.9.337, 4.10 ≤ v < 4.14.303, 4.15 ≤ v < 4.19.270, 4.20 ≤ v < 5.4.229, 5.5 ≤ v < 5.10.163, 5.11 ≤ v < 5.15.86, 5.16 ≤ v < 6.0.16, 6.1 ≤ v < 6.1.2, 2.6.12 | 4.9.337, 4.14.303, 4.19.270, 5.4.229, 5.10.163, 5.15.86, 6.0.16, 6.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.