CVE-2022-48707: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48707 affects the Linux kernel's CXL (Compute Express Link) subsystem. The vulnerability involves a null pointer dereference issue in the cxl/region component when resetting decoders. The issue was discovered in December 2022 and affects Linux kernel versions from 6.0 up to (excluding) 6.1.12, as well as version 6.2 release candidates (rc1 through rc7) (NVD).

The vulnerability occurs because not all decoders have a reset callback. The CXL specification allows a host bridge with a single root port to have no explicit HDM decoders. The region driver assumes there are none, and the CXL core creates a special pass-through decoder instance without a commit/reset callback. Prior to the fix, the ->reset() callback was called unconditionally when calling cxl_region_decode_reset, which could lead to a null pointer dereference (Kernel Patch).

When exploited, this vulnerability can cause a kernel crash when destroying a region with a pass-through decoder reset. This affects configurations with 1 Host Bridge, 1 Root Port, and either one directly attached CXL type 3 device or multiple CXL type 3 devices attached to downstream ports of a switch (NVD).

The vulnerability can be triggered by creating a region with a CXL setup that includes a Host Bridge with a single root port under which a memory device is attached directly, and then destroying the region using the command 'cxl destroy-region regionX -f' (Kernel Patch).

The issue has been fixed by adding a check for the existence of the reset callback before calling it. The fix involves modifying the cxl_region_decode_reset and cxl_region_decode_commit functions to verify if cxld->reset exists before attempting to call it (Kernel Patch).