CVE-2022-48966
published 2024-10-21CVE-2022-48966: In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value comes…
PriorityP429high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.24%
15.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
The pp->indir[0] value comes from the user. It is passed to:
if (cpu_online(pp->rxq_def))
inside the mvneta_percpu_elect() function. It needs bounds checkeding
to ensure that it is not beyond the end of the cpu bitmap.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < 3ceffb8f410b93553fb16fe7e84aa0d35b3ba79b | 3ceffb8f410b93553fb16fe7e84aa0d35b3ba79b |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < 47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92c | 47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92c |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < 5a142486a0db6b0b85031f22d69acd0cdcf8f72b | 5a142486a0db6b0b85031f22d69acd0cdcf8f72b |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50 | eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50 |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < 146ebee8fcdb349d7ec0e49915e6cdafb92544ae | 146ebee8fcdb349d7ec0e49915e6cdafb92544ae |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < a6b30598fec84f8809f5417cde73071ca43e8471 | a6b30598fec84f8809f5417cde73071ca43e8471 |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < 6ca0a506dddc3e1d636935eef339576b263bf3d8 | 6ca0a506dddc3e1d636935eef339576b263bf3d8 |
| linux | linux | >= cad5d847a093077b499a8b0bbfe6804b9226c03e < e8b4fc13900b8e8be48debffd0dfd391772501f7 | e8b4fc13900b8e8be48debffd0dfd391772501f7 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.162-1 | 5.10.162-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 4.10 < 4.14.302 | 4.14.302 |
| linux | linux_kernel | >= 4.15 < 4.19.269 | 4.19.269 |
| linux | linux_kernel | >= 4.20 < 5.4.227 | 5.4.227 |
| linux | linux_kernel | >= 4.5 < 4.9.336 | 4.9.336 |
| linux | linux_kernel | >= 5.11 < 5.15.83 | 5.15.83 |
| linux | linux_kernel | >= 5.16 < 6.0.13 | 6.0.13 |
| linux | linux_kernel | >= 5.5 < 5.10.159 | 5.10.159 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: mvneta: Prevent out of bounds read in mvneta_config_rss()
vendor_redhat·2024-10-21·CVSS 7.1
CVE-2022-48966 [HIGH] CWE-125 kernel: net: mvneta: Prevent out of bounds read in mvneta_config_rss()
kernel: net: mvneta: Prevent out of bounds read in mvneta_config_rss()
In the Linux kernel, the following vulnerability has been resolved:
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
The pp->indir[0] value comes from the user. It is passed to:
if (cpu_online(pp->rxq_def))
inside the mvneta_percpu_elect() function. It needs bounds checkeding
to ensure that it is not beyond the end of the cpu bitmap.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Packa
Debian
CVE-2022-48966: linux - In the Linux kernel, the following vulnerability has been resolved: net: mvneta...
vendor_debian·2022·CVSS 7.1
CVE-2022-48966 [HIGH] CVE-2022-48966: linux - In the Linux kernel, the following vulnerability has been resolved: net: mvneta...
In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value comes from the user. It is passed to: if (cpu_online(pp->rxq_def)) inside the mvneta_percpu_elect() function. It needs bounds checkeding to ensure that it is not beyond the end of the cpu bitmap.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.162-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-69pq-86fm-3gg5: In the Linux kernel, the following vulnerability has been resolved:
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
The pp->indir[0]
ghsa_unreviewed·2024-10-21
CVE-2022-48966 [HIGH] CWE-125 GHSA-69pq-86fm-3gg5: In the Linux kernel, the following vulnerability has been resolved:
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
The pp->indir[0]
In the Linux kernel, the following vulnerability has been resolved:
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
The pp->indir[0] value comes from the user. It is passed to:
if (cpu_online(pp->rxq_def))
inside the mvneta_percpu_elect() function. It needs bounds checkeding
to ensure that it is not beyond the end of the cpu bitmap.
OSV
CVE-2022-48966: In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] va
osv·2024-10-21·CVSS 7.1
CVE-2022-48966 [HIGH] CVE-2022-48966: In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] va
In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value comes from the user. It is passed to: if (cpu_online(pp->rxq_def)) inside the mvneta_percpu_elect() function. It needs bounds checkeding to ensure that it is not beyond the end of the cpu bitmap.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/146ebee8fcdb349d7ec0e49915e6cdafb92544aehttps://git.kernel.org/stable/c/3ceffb8f410b93553fb16fe7e84aa0d35b3ba79bhttps://git.kernel.org/stable/c/47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92chttps://git.kernel.org/stable/c/5a142486a0db6b0b85031f22d69acd0cdcf8f72bhttps://git.kernel.org/stable/c/6ca0a506dddc3e1d636935eef339576b263bf3d8https://git.kernel.org/stable/c/a6b30598fec84f8809f5417cde73071ca43e8471https://git.kernel.org/stable/c/e8b4fc13900b8e8be48debffd0dfd391772501f7https://git.kernel.org/stable/c/eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50
2024-10-21
Published