🔐 CVE Alert

CVE-2022-49444

UNKNOWN 0.0

module: fix [e_shstrndx].sh_size=0 OOB access

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In the Linux kernel, the following vulnerability has been resolved: module: fix [e_shstrndx].sh_size=0 OOB access It is trivial to craft a module to trigger OOB access in this line: if (info->secstrings[strhdr->sh_size - 1] != '\0') { BUG: unable to handle page fault for address: ffffc90000aa0fff PGD 100000067 P4D 100000067 PUD 100066067 PMD 10436f067 PTE 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 7 PID: 1215 Comm: insmod Not tainted 5.18.0-rc5-00007-g9bf578647087-dirty #10 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014 RIP: 0010:load_module+0x19b/0x2391 [rebased patch onto modules-next]

Vendor linux
Product linux
Ecosystems
Industries
Technology
Published Feb 26, 2025
Last Updated May 11, 2026
Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Linux / Linux
ec2a29593c83ed71a7f16e3243941ebfcf75fdf6 < 09cb6663618a74fe5572a4931ecbf098832e79ec ec2a29593c83ed71a7f16e3243941ebfcf75fdf6 < 921630e2e5124a04158129a8f22f4b425e61a858 ec2a29593c83ed71a7f16e3243941ebfcf75fdf6 < 45a76414b6d8b8b39c23fea53b9d20e831ae72a0 ec2a29593c83ed71a7f16e3243941ebfcf75fdf6 < 391e982bfa632b8315235d8be9c0a81374c6a19c 05d891e76dde3e430c707dae7d85139794eeadbd d802672c7f00963613f289579073ac519f0d306c 214aa69cac91a723239118bbbfe77d5654ddff6b
Linux / Linux
5.12

References

NVD ↗ CVE.org ↗ EPSS Data ↗
git.kernel.org: https://git.kernel.org/stable/c/09cb6663618a74fe5572a4931ecbf098832e79ec git.kernel.org: https://git.kernel.org/stable/c/921630e2e5124a04158129a8f22f4b425e61a858 git.kernel.org: https://git.kernel.org/stable/c/45a76414b6d8b8b39c23fea53b9d20e831ae72a0 git.kernel.org: https://git.kernel.org/stable/c/391e982bfa632b8315235d8be9c0a81374c6a19c