Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48949

igb: Initialize mailbox message for VF reset

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. The memory, however, is allocated from the stack meaning that information may be leaked to the VM. Initialize the message buffer to 0 so that no information is passed to the VM in this case.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < a6629659af3f5c6a91e3914ea62554c975ab77f4affected
  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < ef1d739dd1f362aec081278ff92f943c31eb177aaffected
  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < c581439a977545d61849a72e8ed631cfc8a2a3c1affected
  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < f2479c3daaabccbac6c343a737615d0c595c6dc4affected
  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < 367e1e3399dbc56fc669740c4ab60e35da632b0eaffected
  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < 51fd5ede7ed42f272682a0c33d6f0767b3484a3daffected
  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < c383c7c35c7bc15e07a04eefa060a8a80cbeae29affected
  • 6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 to < de5dc44370fbd6b46bd7f1a1e00369be54a041c8affected

Linux Linux

Default version status: affected

  • 4.0affected
  • 0 to < 4.0unaffected
  • 4.14.303 to ≤ 4.14.*unaffected
  • 4.19.270 to ≤ 4.19.*unaffected
  • 5.4.229 to ≤ 5.4.*unaffected
  • 5.10.161 to ≤ 5.10.*unaffected
  • 5.15.85 to ≤ 5.15.*unaffected
  • 6.0.15 to ≤ 6.0.*unaffected
  • 6.1.1 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References