2293315 – (CVE-2022-48744) CVE-2022-48744 kernel: net/mlx5e: Avoid field-overflowing memcpy()

Bug 2293315 (CVE-2022-48744) - CVE-2022-48744 kernel: net/mlx5e: Avoid field-overflowing memcpy()

Summary: CVE-2022-48744 kernel: net/mlx5e: Avoid field-overflowing memcpy()

Keywords:
Status:	NEW
Alias:	CVE-2022-48744
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:	2293307
TreeView+	depends on / blocked

Reported:	2024-06-20 13:31 UTC by Avinash Hanwate
Modified:	2024-09-23 00:28 UTC (History)
CC List:	5 users (show)
Fixed In Version:	kernel 5.16.6, kernel 5.17
Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability was found in the Linux kernel's mlx5 driver in the mlx5e_xdp implementation. This issue arises from a field-overflowing memcpy() that writes beyond the intended buffer size, potentially corrupting adjacent memory areas.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description Avinash Hanwate 2024-06-20 13:31:10 UTC

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Avoid field-overflowing memcpy()

The Linux kernel CVE team has assigned CVE-2022-48744 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024062003-CVE-2022-48744-0f03@gregkh/T

Note You need to log in before you can comment on or make changes to this bug.