CVE-2022-48966: net: mvneta: Prevent out of bounds read in mvneta_config_rss()
In the Linux kernel, the following vulnerability has been resolved:
net: mvneta: Prevent out of bounds read in mvnetaconfigrss()
The pp->indir[0] value comes from the user. It is passed to:
if (cpuonline(pp->rxqdef))
inside the mvnetapercpuelect() function. It needs bounds checkeding to ensure that it is not beyond the end of the cpu bitmap.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48966?
CVE-2022-48966 is considered to be a high severity vulnerability due to its potential to cause out-of-bounds reads in the Linux kernel.
How do I fix CVE-2022-48966?
To fix CVE-2022-48966, upgrade your Linux kernel to a version that is patched for this vulnerability.
What systems are affected by CVE-2022-48966?
CVE-2022-48966 affects various versions of the Linux kernel from 4.5 to 6.1-rc8.
What type of vulnerability is CVE-2022-48966?
CVE-2022-48966 is an out-of-bounds read vulnerability in the network driver component of the Linux kernel.
Can CVE-2022-48966 be exploited remotely?
Yes, CVE-2022-48966 can potentially be exploited remotely if user input is improperly validated.