Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-48779

net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will free the struct ocelot_bridge_vlan, so if this is the same as the port's pvid_vlan which we access afterwards, what we're accessing is freed memory. Fix the bug by determining whether to clear ocelot_port->pvid_vlan prior to calling ocelot_vlan_member_del().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d4004422f6f9fa8e55c04482008c1c9f9edd2d19 to < c98bed60cdd7f22237ae256cc9c1c3087206b8a2affected
  • d4004422f6f9fa8e55c04482008c1c9f9edd2d19 to < ef57640575406f57f5b3393cf57f457b0ace837eaffected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 5.16.11 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References