01 Record

CVE-2022-48987

media: v4l2-dv-timings.c: fix too strict blanking sanity checks

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

media: v4l2-dv-timings.c: fix too strict blanking sanity checks

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 16.0% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-10-21 20:06Z2 YR AGO

Last updated

2026-05-11 18:51Z5 MO AGO

Reserved

2024-08-22

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-190Integer Overflow or WraparoundBase

Data version

5.2

Document digest

831d8f7118a3edb2c1fa840388e0ffc8f0ea1c03c0d92d473824e6f9a7cf08cb

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux15ded23db134da975b49ea99770de0346c193b24 to < 0d73b49c4037199472b29574ae21c21aef493971, 3d43b2b8a3cdadd6cef9ac8ef5d156b6214a01c8 to < a2b56627c0d13009e02f6f2c0206c0451ed19a0e, 9cf9211635b68e8e0c8cb88d43ca7dc83e4632aa to < 2572ab14b73aa45b6ae7e4c089ccf119fed5cf89, b4a3a01762ae072c7f6ff2ff53b5019761288346 to < 4afc77068e36cee45b39d4fdc7513de26980f72c, 683015ae163481457a16fad2317af66360dc4762 to < 32f01f0306a98629508f84d7ef0d1d037bc274a2, 491c0959f01d87bcbd5a1498bc70e0a3382c65a8 to < 6fb8bc29bfa80707994a63cc97e2f9920e0b0608, dc7276c3f6ca008be1faf531f84b49906c9bcf7f to < d3d14cdf1c7ae2caa3e999bae95ba99e955fb7c3, 4b6d66a45ed34a15721cb9e11492fa1a24bc83df to < 5eef2141776da02772c44ec406d6871a790761ee, 4.9.332 to < 4.9.336, 4.14.298 to < 4.14.302, 4.19.264 to < 4.19.269, 5.4.223 to < 5.4.227, 5.10.153 to < 5.10.159, 5.15.77 to < 5.15.83, 6.0.7 to < 6.0.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0d73b49c4037199472b29574ae21c21aef493971
git.kernel.orghttps://git.kernel.org/stable/c/a2b56627c0d13009e02f6f2c0206c0451ed19a0e
git.kernel.orghttps://git.kernel.org/stable/c/2572ab14b73aa45b6ae7e4c089ccf119fed5cf89
git.kernel.orghttps://git.kernel.org/stable/c/4afc77068e36cee45b39d4fdc7513de26980f72c
git.kernel.orghttps://git.kernel.org/stable/c/32f01f0306a98629508f84d7ef0d1d037bc274a2
git.kernel.orghttps://git.kernel.org/stable/c/6fb8bc29bfa80707994a63cc97e2f9920e0b0608
git.kernel.orghttps://git.kernel.org/stable/c/d3d14cdf1c7ae2caa3e999bae95ba99e955fb7c3
git.kernel.orghttps://git.kernel.org/stable/c/5eef2141776da02772c44ec406d6871a790761ee

07 Fixed in

Debian 12

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.