Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-48966

net: mvneta: Prevent out of bounds read in mvneta_config_rss()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value comes from the user. It is passed to: if (cpu_online(pp->rxq_def)) inside the mvneta_percpu_elect() function. It needs bounds checkeding to ensure that it is not beyond the end of the cpu bitmap.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < 3ceffb8f410b93553fb16fe7e84aa0d35b3ba79baffected
  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < 47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92caffected
  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < 5a142486a0db6b0b85031f22d69acd0cdcf8f72baffected
  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50affected
  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < 146ebee8fcdb349d7ec0e49915e6cdafb92544aeaffected
  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < a6b30598fec84f8809f5417cde73071ca43e8471affected
  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < 6ca0a506dddc3e1d636935eef339576b263bf3d8affected
  • cad5d847a093077b499a8b0bbfe6804b9226c03e to < e8b4fc13900b8e8be48debffd0dfd391772501f7affected

Linux Linux

Default version status: affected

  • 4.5affected
  • 0 to < 4.5unaffected
  • 4.9.336 to ≤ 4.9.*unaffected
  • 4.14.302 to ≤ 4.14.*unaffected
  • 4.19.269 to ≤ 4.19.*unaffected
  • 5.4.227 to ≤ 5.4.*unaffected
  • 5.10.159 to ≤ 5.10.*unaffected
  • 5.15.83 to ≤ 5.15.*unaffected
  • 6.0.13 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References