CVE-2022-48804

In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec. Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.

• linux linux kernel (< 4.9.302) • linux linux kernel (>= 4.10 < 4.14.267) • linux linux kernel (>= 4.15 < 4.19.320) • linux linux kernel (>= 4.20 < 5.4.180) • linux linux kernel (>= 5.5 < 5.10.101) • linux linux kernel (>= 5.11 < 5.15.24) • linux linux kernel (>= 5.16 < 5.16.10) • linux linux kernel 5.17