8.8

CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays

Modified
AliasesUBUNTU-CVE-2022-48967DEBIAN-CVE-2022-48967
Published 21-10-2024Last modified 05-08-2026

Vulnerability summary

CVE-2022-48967 is a high (CVSS 8.8) Improper Validation of Array Index vulnerability in linux. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.5% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.34%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10 · Related 10
SUSE-SU-2024:3983-1SUSE-SU-2024:3985-1SUSE-SU-2024:4081-1SUSE-SU-2024:4082-1SUSE-SU-2024:4100-1SUSE-SU-2024:4103-1

Timeline

  1. 21-10-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported: memcpy: detected field-spanning write (size 129) of single field "target->sensf_res" at net/nfc/nci/ntf.c:260 (size 18) This appears to be a legitimate lack of bounds checking in nci_add_new_protocol(). Add the missing checks.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.34%

Chance of exploitation in the next 30 days

Percentile

27%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.34% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu113 products
  • linuxAll versions (No fix recorded) | < 4.15.0-206.217 | < 5.4.0-144.161 | < 5.15.0-67.74
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 4.15.0-1151.164 | < 5.4.0-1097.105 | < 5.15.0-1031.35
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < 6b37f0dc0638d13a006f2f24d2f6ca61e83bc714 | ≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < dbdcfb9f6748218a149f62468d6297ce3f014e9c | ≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < cff35329070b96b4484d23f9f48a5ca2c947e750 | ≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < 6778434706940b8fad7ef35f410d2b9929f256d2 | ≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < 27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9 | ≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < 908b2da426fe9c3ce74cf541ba40e7a4251db191 | ≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < f41547546db9af99da2c34e3368664d7a79cefae | ≥ 019c4fbaa790e2b3f11dab0c8b7d9896d77db3e5, < e329e71013c9b5a4535b099208493c7826ee4a64 | 3.4
  • linux_kernel≥ 3.4, < 4.9.336 | ≥ 4.10, < 4.14.302 | ≥ 4.15, < 4.19.269 | ≥ 4.20, < 5.4.227 | ≥ 5.5, < 5.10.159 | ≥ 5.11, < 5.15.83 | ≥ 5.16, < 6.0.13 | 6.1:rc1 | 6.1:rc2 | 6.1:rc3 | 6.1:rc4 | 6.1:rc5 | 6.1:rc6 | 6.1:rc7 | 6.1:rc8
Debian1 product
  • linux< 6.1.4-1

3 vendors · 116 products

References

12 links
Show all 12 references