CVE-2022-1649: 
NixOS vulnerability analysis and mitigation

A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. The vulnerability was discovered by Emmanuel Tacheau of Cisco Talos and was assigned CVE-2022-43590. The issue was disclosed to the vendor on November 4, 2022, and a patch was released on November 14, 2022 (Talos Report).

The vulnerability exists in the Windows device driver's handling of I/O Request Packets (IRP). When processing specific IOCTL code 0x830a0, the driver fails to properly validate a pointer before passing it to ExFreePoolWithTag, leading to a null pointer dereference. The vulnerability received a CVSSv3 score of 6.2 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is classified as CWE-476 (NULL Pointer Dereference) (Talos Report).

A specially crafted I/O request packet (IRP) can trigger this vulnerability, leading to a denial of service condition through a Blue Screen of Death (BSOD). The vulnerability affects the system's stability and availability (Talos Report).

An attacker can exploit this vulnerability by issuing a specifically crafted IOCTL to the affected driver. The attack requires local access to the system to execute the exploit (Talos Report).

The vendor released a patch on November 14, 2022, to address this vulnerability. Users should update to the latest version of CBFS Filter to mitigate the risk (Talos Report).