CVE-2022-45126

 

Published at: - 09-01-2023 04:15

Last modified: - 12-01-2023 10:10

Total changes: - 2

Description

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md

 

Keywords

NVD

 

CVE-2022-45126

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures