Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49516

ice: always check VF VSI pointer values

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ice: always check VF VSI pointer values The ice_get_vf_vsi function can return NULL in some cases, such as if handling messages during a reset where the VSI is being removed and recreated. Several places throughout the driver do not bother to check whether this VSI pointer is valid. Static analysis tools maybe report issues because they detect paths where a potentially NULL pointer could be dereferenced. Fix this by checking the return value of ice_get_vf_vsi everywhere.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 12bb018c538c3b9a050f69f62fa09fa6c9160bca to < e7be3877589d539c52e5d1d23a625f889b541b9daffected
  • 12bb018c538c3b9a050f69f62fa09fa6c9160bca to < baeb705fd6a7245cc1fa69ed991a9cffdf44a174affected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.18.3 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References