CVE-2022-48932
published 2024-08-22CVE-2022-48932: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
9.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
When adding a rule with 32 destinations, we hit the following out-of-band
access issue:
BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70
This patch fixes the issue by both increasing the allocated buffers to
accommodate for the needed actions and by checking the number of actions
to prevent this issue when a rule with too many actions is provided.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.12-1 (bookworm) | linux 5.16.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1ffd498901c1134a7cbecf5409e12c064c39cef9 < 4ad319cdfbe555b4ff67bc608736c46a6930c848 | 4ad319cdfbe555b4ff67bc608736c46a6930c848 |
| linux | linux | >= 1ffd498901c1134a7cbecf5409e12c064c39cef9 < 0aec12d97b2036af0946e3d582144739860ac07b | 0aec12d97b2036af0946e3d582144739860ac07b |
| linux | linux_kernel | >= 0 < 5.16.12-1 | 5.16.12-1 |
| linux | linux_kernel | >= 0 < 5.16.12-1 | 5.16.12-1 |
| linux | linux_kernel | >= 0 < 5.16.12-1 | 5.16.12-1 |
| linux | linux_kernel | >= 5.16 < 5.16.12 | 5.16.12 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
vendor_redhat·2024-08-22·CVSS 5.5
CVE-2022-48932 [MEDIUM] CWE-125 kernel: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
kernel: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
When adding a rule with 32 destinations, we hit the following out-of-band
access issue:
BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70
This patch fixes the issue by both increasing the allocated buffers to
accommodate for the needed actions and by checking the number of actions
to prevent this issue when a rule with too many actions is provided.
A vulnerability was found in the Linux kernel's Ethernet fs_dr.c driver in the mlx5_cmd_dr_create_fte() function, where a slab-out-of-bounds can occur. This flaw is caused by how the driver allocates and manages memory when
Debian
CVE-2022-48932: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: D...
vendor_debian·2022·CVSS 5.5
CVE-2022-48932 [MEDIUM] CVE-2022-48932: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: D...
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.
Scope: local
bookworm: resolved (fixed in 5.16.12-1)
bullseye: resolved
forky: resolved (fixed in 5.16.12-1)
sid: resolved (fixed in 5.16.12-1)
trixie: resolved (fixed in 5.16.12-1)
OSV
CVE-2022-48932: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule
osv·2024-08-22·CVSS 5.5
CVE-2022-48932 [MEDIUM] CVE-2022-48932: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.
GHSA
GHSA-vpr7-cgq2-g5rr: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
When adding a rul
ghsa_unreviewed·2024-08-22
CVE-2022-48932 [MEDIUM] CWE-125 GHSA-vpr7-cgq2-g5rr: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
When adding a rul
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
When adding a rule with 32 destinations, we hit the following out-of-band
access issue:
BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70
This patch fixes the issue by both increasing the allocated buffers to
accommodate for the needed actions and by checking the number of actions
to prevent this issue when a rule with too many actions is provided.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-22
Published