medium4.0
CVE-2022-45126
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.
Impact
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openharmony | Openharmony | from 3.1.0 through 3.1.4 |
| Openatom | Openharmony | from 1.1.0 through 1.1.5 from 3.0 through 3.0.6 |