Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-49785

x86/sgx: Add overflow check in sgx_validate_offset_length()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgx_validate_offset_length() sgx_validate_offset_length() function verifies "offset" and "length" arguments provided by userspace, but was missing an overflow check on their addition. Add it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c6d26d370767fa227fc44b98a8bdad112efdf563 to < 5277e3d633a5d4157987f4aff068caa55e36db19affected
  • c6d26d370767fa227fc44b98a8bdad112efdf563 to < 3b1c10fb754b0b67165e3f055a4208e5ba26dc89affected
  • c6d26d370767fa227fc44b98a8bdad112efdf563 to < f0861f49bd946ff94fce4f82509c45e167f63690affected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.81 to ≤ 5.15.*unaffected
  • 6.0.10 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References