CVE-2022-35988: `CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow
TensorFlow is an open source platform for machine learning. When tf.linalg.matrixrank receives an empty input a, the GPU kernel gives a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit c55b476aa0e0bd4ee99d0f3ad18d9d706cd1260a. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-35988?
CVE-2022-35988 has a medium severity level due to its potential to cause a denial of service.
How do I fix CVE-2022-35988?
To fix CVE-2022-35988, update TensorFlow to a version beyond 2.10-rc3 or apply the relevant patches as noted in the official GitHub repository.
Which versions of TensorFlow are affected by CVE-2022-35988?
CVE-2022-35988 affects TensorFlow versions up to 2.7.2 and those between 2.8.0 and 2.9.1, as well as specific release candidates of 2.10.
What is the impact of CVE-2022-35988?
The impact of CVE-2022-35988 includes a potential denial of service due to the GPU kernel failing when an empty input is processed.
Is there a workaround for CVE-2022-35988?
There is no official workaround for CVE-2022-35988 other than upgrading to patched versions of TensorFlow.