VYPR
← All advisories
Medium severity4.0NVD Advisory· Published Dec 8, 2022· Updated Jun 17, 2026

CVE-2022-41802

CVE-2022-41802

Description

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Affected products

4
  • OpenHarmony/Openharmony3 versions
    cpe:2.3:a:openharmony:openharmony:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:openharmony:openharmony:*:*:*:*:*:*:*:*range: >=3.1,<=3.1.4
    • (no CPE)range: <=v3.1.4
    • (no CPE)range: 3.1.0
  • Openatom/Openharmony
    cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*
    Range: >=1.1.0,<=1.1.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.