net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
Published Aug 22, 2024
7.8
HIGHCVSS 3.1
EPSS 0.19%
Description
When adding a rule with 32 destinations, we hit the following out-of-band access issue:
BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70
This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.
Affected products
-
Affected
- ≥ , <
- ≥ , <
-
Affected
- 5.16
Unaffected
- ≥ 0, < 5.16
- ≥ 5.16.12, ≤ 5.16.*
- 5.17
- ≥ 5.16 · < 5.16.12
No data.
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Enterprise Linux is not impacted by this CVE, as the vulnerability in question does not affect the specific versions or configurations of the Linux kernel used in its distributions. This ensures that users of Red Hat Enterprise Linux are not exposed to the potential risks associated with this issue and no further action or mitigation is necessary for systems running this operating system.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References (8)
- https://access.redhat.com/security/cve/CVE-2022-48932 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2307188 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53811 Advisory
- https://git.kernel.org/stable/c/0aec12d97b2036af0946e3d582144739860ac07b Patch
- https://git.kernel.org/stable/c/4ad319cdfbe555b4ff67bc608736c46a6930c848 Patch
- https://lore.kernel.org/linux-cve-announce/2024082223-CVE-2022-48932-9dc7@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2022-48932
- https://www.cve.org/CVERecord?id=CVE-2022-48932
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data