PT-2024-9257

CVE-2022-48747

·

Published

2024-06-20

·

Updated

2025-09-29

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to the bio truncate() function in the Linux kernel, which clears the buffer outside of the last block of a block device. However, the function is using the wrong offset of a page, potentially returning uninitialized data. This can occur when both a truncated or corrupted file system and userspace (via a block device) are trying to read the last block of the device.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2024:5101
ALSA-2024:5102
ALSA-2025_16880
CESA-2024_5101
CESA-2024_5102
INFSA-2024_5101
INFSA-2024_5102
OPENSUSE-SU-2024_2362-1
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
RHSA-2024:5101
RHSA-2024_5101
RHSA-2024:5102
RHSA-2024_5102
RLSA-2024:5101
RLSA-2024:5102
RXSA-2024:5101
SUSE-SU-2024:2362-1
SUSE-SU-2024:2372-1
SUSE-SU-2024:2384-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2902-1
SUSE-SU-2024:2929-1
SUSE-SU-2024:2939-1
Found an issue in the description? Have something to add? Feel free to write us 👾