CVE-2022-49247

一、漏洞信息
 漏洞编号：[CVE-2022-49247](https://nvd.nist.gov/vuln/detail/CVE-2022-49247)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.1.8,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUEDIf the callback  start_streaming  fails, then allqueued buffers in the driver should be returned withstate  VB2_BUF_STATE_QUEUED . Currently, they arereturned with  VB2_BUF_STATE_ERROR  which is wrong.Fix this. This also fixes the warning:[   65.583633] WARNING: CPU: 5 PID: 593 at drivers/media/common/videobuf2/videobuf2-core.c:1612 vb2_start_streaming+0xd4/0x160 [videobuf2_common][   65.585027] Modules linked in: snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_soc_hdmi_codec dw_hdmi_i2s_audio saa7115 stk1160 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev mc crct10dif_ce panfrost snd_soc_simple_card snd_soc_audio_graph_card snd_soc_spdif_tx snd_soc_simple_card_utils gpu_sched phy_rockchip_pcie snd_soc_rockchip_i2s rockchipdrm analogix_dp dw_mipi_dsi dw_hdmi cec drm_kms_helper drm rtc_rk808 rockchip_saradc industrialio_triggered_buffer kfifo_buf rockchip_thermal pcie_rockchip_host ip_tables x_tables ipv6[   65.589383] CPU: 5 PID: 593 Comm: v4l2src0:src Tainted: G        W         5.16.0-rc4-62408-g32447129cb30-dirty #14[   65.590293] Hardware name: Radxa ROCK Pi 4B (DT)[   65.590696] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)[   65.591304] pc : vb2_start_streaming+0xd4/0x160 [videobuf2_common][   65.591850] lr : vb2_start_streaming+0x6c/0x160 [videobuf2_common][   65.592395] sp : ffff800012bc3ad0[   65.592685] x29: ffff800012bc3ad0 x28: 0000000000000000 x27: ffff800012bc3cd8[   65.593312] x26: 0000000000000000 x25: ffff00000d8a7800 x24: 0000000040045612[   65.593938] x23: ffff800011323000 x22: ffff800012bc3cd8 x21: ffff00000908a8b0[   65.594562] x20: ffff00000908a8c8 x19: 00000000fffffff4 x18: ffffffffffffffff[   65.595188] x17: 000000040044ffff x16: 00400034b5503510 x15: ffff800011323f78[   65.595813] x14: ffff000013163886 x13: ffff000013163885 x12: 00000000000002ce[   65.596439] x11: 0000000000000028 x10: 0000000000000001 x9 : 0000000000000228[   65.597064] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff726c5e78[   65.597690] x5 : ffff800012bc3990 x4 : 0000000000000000 x3 : ffff000009a34880[   65.598315] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000007cd99f0[   65.598940] Call trace:[   65.599155]  vb2_start_streaming+0xd4/0x160 [videobuf2_common][   65.599672]  vb2_core_streamon+0x17c/0x1a8 [videobuf2_common][   65.600179]  vb2_streamon+0x54/0x88 [videobuf2_v4l2][   65.600619]  vb2_ioctl_streamon+0x54/0x60 [videobuf2_v4l2][   65.601103]  v4l_streamon+0x3c/0x50 [videodev][   65.601521]  __video_do_ioctl+0x1a4/0x428 [videodev][   65.601977]  video_usercopy+0x320/0x828 [videodev][   65.602419]  video_ioctl2+0x3c/0x58 [videodev][   65.602830]  v4l2_ioctl+0x60/0x90 [videodev][   65.603227]  __arm64_sys_ioctl+0xa8/0xe0[   65.603576]  invoke_syscall+0x54/0x118[   65.603911]  el0_svc_common.constprop.3+0x84/0x100[   65.604332]  do_el0_svc+0x34/0xa0[   65.604625]  el0_svc+0x1c/0x50[   65.604897]  el0t_64_sync_handler+0x88/0xb0[   65.605264]  el0t_64_sync+0x16c/0x170[   65.605587] ---[ end trace 578e0ba07742170d ]---
 漏洞公开时间：2025-02-26 15:01:01
 漏洞创建时间：2025-02-26 16:25:58
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2022-49247
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03054f22d5abd80ad89547512c2bfbfb2714d3ed |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/2874122ca4ca74adec72d6d6bf8828228ec20f15 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/3cc050df73e3d973f1870a8dc0e177e77670bc7f |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/4d68603cc4382174bc1e7d532e10675c48c6b257 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a09e9882800fdfc5aab93f77c3f0132071d2191b |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/f04a520a422222fc921bf035dc67414c500a286a |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/f66e6fd1488d26229f11d86616de1b658c70fa8a |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/fbe04b49a54e31f4321d632270207f0e6304cd16 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-49247 | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2022/CVE-2022-49247.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/03054f22d5abd80ad89547512c2bfbfb2714d3ed | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/f04a520a422222fc921bf035dc67414c500a286a | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/3cc050df73e3d973f1870a8dc0e177e77670bc7f | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/4d68603cc4382174bc1e7d532e10675c48c6b257 | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/a09e9882800fdfc5aab93f77c3f0132071d2191b | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/2874122ca4ca74adec72d6d6bf8828228ec20f15 | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/f66e6fd1488d26229f11d86616de1b658c70fa8a | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| suse_bugzilla | https://git.kernel.org/stable/c/fbe04b49a54e31f4321d632270207f0e6304cd16 | https://bugzilla.suse.com/show_bug.cgi?id=1237783 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025022626-CVE-2022-49247-66c2@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2347676 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
  Reserved.
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP4(4.19.90):受影响
2.openEuler-22.03-LTS-SP3(5.10.0):不受影响
3.openEuler-22.03-LTS-SP4(5.10.0):不受影响
4.master(6.6.0):不受影响
5.openEuler-24.03-LTS(6.6.0):不受影响
6.openEuler-24.03-LTS-Next(6.6.0):不受影响
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP4(4.19.90):否
2.openEuler-22.03-LTS-SP3(5.10.0):否
3.master(6.6.0):否
4.openEuler-24.03-LTS(6.6.0):否
5.openEuler-24.03-LTS-Next(6.6.0):否
6.openEuler-22.03-LTS-SP4(5.10.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否

原因说明：
  1.openEuler-20.03-LTS-SP4(4.19.90):正常修复
2.master(6.6.0):不受影响-漏洞代码不能被攻击者触发
3.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
4.openEuler-22.03-LTS-SP3(5.10.0):不受影响-漏洞代码不存在
5.openEuler-22.03-LTS-SP4(5.10.0):不受影响-漏洞代码不存在
6.openEuler-24.03-LTS(6.6.0):不受影响-漏洞代码不存在
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响-漏洞代码不存在

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-1370

src-openEuler/kernel

内容风险标识

评论 (7)

src-openEuler/kernel .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2022-49247

评论 (7)

搜索帮助

src-openEuler/kernel