Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-49368

net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() The "fsp->location" variable comes from user via ethtool_get_rxnfc(). Check that it is valid to prevent an out of bounds read.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < b4f0e57ea0d867aacffad7999527e48bd4ea9293affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 5ba81f82607ead85fe36f50869fc4f5661359ab8affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 657e7174603f0aab2cdedc64ac81edffd2a87afeaffected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 2bd1faedb74dc2a2be3972abcd4239b75a3e7b00affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 71ae30662ec610b92644d13f79c78f76f17873b3affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < b24ca1cf846273361d5bd73a35de95a486a54b6daffected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 4cde554c70d7397cfa2e4116bacb4accdfb6fd48affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 0b238f75b65ed4462ef4cdfa718cac0ac7fce3b8affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < e7e7104e2d5ddf3806a28695670f21bef471f1e1affected

Linux Linux

Default version status: affected

  • 4.9affected
  • 0 to < 4.9unaffected
  • 4.9.318 to ≤ 4.9.*unaffected
  • 4.14.283 to ≤ 4.14.*unaffected
  • 4.19.247 to ≤ 4.19.*unaffected
  • 5.4.198 to ≤ 5.4.*unaffected
  • 5.10.122 to ≤ 5.10.*unaffected
  • 5.15.47 to ≤ 5.15.*unaffected
  • 5.17.15 to ≤ 5.17.*unaffected
  • 5.18.4 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References