CVE-2022-48804

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the vt ioctl function, specifically the vt setactivate call, where the array index nospec mechanism fails to properly sanitize an out-of-bounds value, leading to a transient integer underflow. The vsa.console value should be decreased first and then sanitized with array index nospec to prevent this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.