CVE-2022-48655 – This CVE describes an out-of-bounds memory acce... (How to Fix)

Q: What is the severity of CVE-2022-48655?

CVE-2022-48655 has a CVSS score of 7.8 (HIGH). This CVE describes an out-of-bounds memory access vulnerability in the Linux kernel's SCMI (System Control and Management Interface) reset domains subsystem. Attackers could potentially exploit this to cause kernel crashes or execute arbitrary code. Systems running vulnerable Linux kernel versions with SCMI firmware support are affected.

📋 TL;DR

This CVE describes an out-of-bounds memory access vulnerability in the Linux kernel's SCMI (System Control and Management Interface) reset domains subsystem. Attackers could potentially exploit this to cause kernel crashes or execute arbitrary code. Systems running vulnerable Linux kernel versions with SCMI firmware support are affected.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific vulnerable versions not explicitly stated in CVE description; check kernel commit history for affected versions.

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Requires SCMI firmware support and reset domains functionality to be vulnerable.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash, or potential arbitrary code execution with kernel privileges resulting in complete system compromise.

🟠

Likely Case

Kernel crash or system instability requiring reboot, potentially leading to denial of service.

🟢

If Mitigated

System remains stable with proper bounds checking preventing out-of-bounds access.

🌐 Internet-Facing: LOW - Requires local access or ability to interact with SCMI subsystem.

🏢 Internal Only: MEDIUM - Malicious local users or compromised processes could potentially exploit this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH

Exploitation requires specific conditions and knowledge of SCMI subsystem internals.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commits: 1f08a1b26cfc53b7715abc46857c6023bb1b87de, 7184491fc515f391afba23d0e9b690caaea72daf, 8e65edf0d37698f7a6cb174608d3ec7976baf49e, e9076ffbcaed5da6c182b144ef9f6e24554af268, f2277d9e2a0d092c13bae7ee82d75432bb8b5108

Vendor Advisory: https://git.kernel.org/stable/c/1f08a1b26cfc53b7715abc46857c6023bb1b87de

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version. 2. Check kernel commit history for your distribution. 3. Reboot system after kernel update.

🔧 Temporary Workarounds

Disable SCMI reset domains

linux

If SCMI reset domains functionality is not required, disable it via kernel configuration.

Modify kernel configuration to disable CONFIG_ARM_SCMI_RESET_DOMAINS

🧯 If You Can't Patch

Restrict local user access to systems with vulnerable kernels
Implement strict process isolation and privilege separation

🔍 How to Verify

Check if Vulnerable:

Check kernel version and verify if SCMI reset domains support is enabled. Examine kernel configuration for CONFIG_ARM_SCMI_RESET_DOMAINS.

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes the patched commits. Check dmesg for SCMI-related errors after system operation.

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages
SCMI subsystem errors in dmesg
Out-of-bounds access warnings

Network Indicators:

None - this is a local kernel vulnerability

SIEM Query:

Search for kernel panic events or SCMI-related error messages in system logs

📊 Metadata

CVE ID: CVE-2022-48655

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-119

Published: April 28, 2024

Last Updated: January 10, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2022-48655, you might also want to check these: