Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48938

CDC-NCM: avoid overflow in sanity checking

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4ca8b8855264cf1439cdab3da7049bd1e3c2a9e6 to < a612395c7631918e0e10ea48b9ce5ab4340f26a6affected
  • a270ca35a9499b58366d696d3290eaa4697a42db to < 9957fbf34f52a4d8945d1bf39aae400ef9a11246affected
  • 0fa81b304a7973a499f844176ca031109487dd31 to < 69560efa001397ebb8dc1c3e6a3ce00302bb9f7faffected
  • 0fa81b304a7973a499f844176ca031109487dd31 to < 49909c9f8458cacb5b241106cba65aba5a6d8f4caffected
  • 0fa81b304a7973a499f844176ca031109487dd31 to < 7b737e47b87589031f0d4657f6d7b0b770474925affected
  • 0fa81b304a7973a499f844176ca031109487dd31 to < 8d2b1a1ec9f559d30b724877da4ce592edc41fdcaffected
  • 8cf7db86a8984ffa3a3388a8df12bc0aa4c79bd7affected
  • 4.19.285 to < 4.19.323affected
  • 5.4.245 to < 5.4.285affected
  • 4.14.317 to < 4.15affected

Linux Linux

Default version status: affected

  • 5.7affected
  • 0 to < 5.7unaffected
  • 4.19.323 to ≤ 4.19.*unaffected
  • 5.4.285 to ≤ 5.4.*unaffected
  • 5.10.103 to ≤ 5.10.*unaffected
  • 5.15.26 to ≤ 5.15.*unaffected
  • 5.16.12 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References