Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50040

net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() If an error occurs in dsa_devlink_region_create(), then 'priv->regions' array will be accessed by negative index '-1'. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bf425b82059e0b0752c0026353c1902112200837 to < 7983e1e44cb322eba6af84160b6d18df80603fb8affected
  • bf425b82059e0b0752c0026353c1902112200837 to < e84c6321f3578c38cb3c24258db91a92672b17a8affected
  • bf425b82059e0b0752c0026353c1902112200837 to < 79f86b862416126a2e826cb74224180d6625a32faffected
  • bf425b82059e0b0752c0026353c1902112200837 to < fd8e899cdb5ecaf8e8ee73854a99e10807eef1deaffected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.138 to ≤ 5.10.*unaffected
  • 5.15.63 to ≤ 5.15.*unaffected
  • 5.19.4 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References