{ "document": { "aggregate_severity": { "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/rhel7els/vex/2022/cve-2022-48827-els_os-rhel7els.json" } ], "title": "Security update on CVE-2022-48827", "tracking": { "current_release_date": "2025-12-23T22:15:38Z", "generator": { "date": "2025-12-23T22:15:38Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2022-48827-ELS_OS-RHEL7ELS", "initial_release_date": "2022-01-01T00:00:00Z", "revision_history": [ { "date": "2022-01-01T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2025-11-04T08:29:06Z", "number": "2", "summary": "Official Publication" }, { "date": "2025-12-23T22:15:38Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7", "product_identification_helper": { "cpe": "cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-perf@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product": { "name": "kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_id": "kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@3.10.0-1160.139.1.el7.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" }, "product_reference": "kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-48827", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix the behavior of READ near OFFSET_MAX\n\nDan Aloni reports:\n> Due to commit 8cfb9015280d (\"NFS: Always provide aligned buffers to\n> the RPC read layers\") on the client, a read of 0xfff is aligned up\n> to server rsize of 0x1000.\n>\n> As a result, in a test where the server has a file of size\n> 0x7fffffffffffffff, and the client tries to read from the offset\n> 0x7ffffffffffff000, the read causes loff_t overflow in the server\n> and it returns an NFS code of EINVAL to the client. The client as\n> a result indefinitely retries the request.\n\nThe Linux NFS client does not handle NFS?ERR_INVAL, even though all\nNFS specifications permit servers to return that status code for a\nREAD.\n\nInstead of NFS?ERR_INVAL, have out-of-range READ requests succeed\nand return a short result. Set the EOF flag in the result to prevent\nthe client from retrying the READ request. This behavior appears to\nbe consistent with Solaris NFS servers.\n\nNote that NFSv3 and NFSv4 use u64 offset values on the wire. These\nmust be converted to loff_t internally before use -- an implicit\ntype cast is not adequate for this purpose. Otherwise VFS checks\nagainst sb->s_maxbytes do not work properly.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red-Hat-7:bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-48827" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0cb4d23ae08c48f6bf3c29a8e5c4a74b8388b960", "url": "https://git.kernel.org/stable/c/0cb4d23ae08c48f6bf3c29a8e5c4a74b8388b960" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1726a39b0879acfb490b22dca643f26f4f907da9", "url": "https://git.kernel.org/stable/c/1726a39b0879acfb490b22dca643f26f4f907da9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/44502aca8e02ab32d6b0eb52e006a5ec9402719b", "url": "https://git.kernel.org/stable/c/44502aca8e02ab32d6b0eb52e006a5ec9402719b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c6eff5c4277146a78b4fb8c9b668dd64542c41b0", "url": "https://git.kernel.org/stable/c/c6eff5c4277146a78b4fb8c9b668dd64542c41b0" } ], "release_date": "2024-07-16T12:15:00Z", "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "Red-Hat-7:bpftool-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-debug-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-debug-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-headers-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-tools-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-tools-libs-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:kernel-tools-libs-devel-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64", "Red-Hat-7:python-perf-0:3.10.0-1160.139.1.el7.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }