Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-48932

net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1ffd498901c1134a7cbecf5409e12c064c39cef9 to < 4ad319cdfbe555b4ff67bc608736c46a6930c848affected
  • 1ffd498901c1134a7cbecf5409e12c064c39cef9 to < 0aec12d97b2036af0946e3d582144739860ac07baffected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 5.16.12 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References