CVE-2022-41802: Openatom Openharmony

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Affected products

• Openatom Openharmony: from 1.1.0, up to and including 1.1.5; from 3.0, up to and including 3.0.6
• Openharmony Openharmony: from 3.1, up to and including 3.1.4

Published 2022-12-08. Last modified 2026-06-17.