CVE-2022-48871

CVE-2022-48871 is a slab-out-of-bounds vulnerability in the Linux kernel's qcom-geni-serial driver. It affects Linux kernel versions and specifically impacts Qualcomm Bluetooth HCI UART devices. The vulnerability arises when the RX FIFO buffer is allocated based on a default depth, but later resized to a larger capacity, leading to out-of-bounds writes during RX UART handling. Rated with a CVSS score of 7.1 (HIGH), this vulnerability has a local attack vector (AV:L) and low attack complexity (AC:L), requiring local privileges (PR:L). A successful exploit could lead to high confidentiality impact (C:H) and high availability impact (A:H), potentially causing system crashes or information disclosure. There is no evidence of active exploitation, and no exploit code is publicly available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating low public attention at this time.