CVE-2022-49025: net/mlx5e: Fix use-after-free when reverting termination table
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix use-after-free when reverting termination table
When having multiple dests with termination tables and second one or afterwards fails the driver reverts usage of term tables but doesn't reset the assignment in attr->dests[numvportdests].termtbl which case a use-after-free when releasing the rule. Fix by resetting the assignment of termtbl to null.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49025?
CVE-2022-49025 has a severity rating that warrants immediate attention due to potential exploitation risks.
How do I fix CVE-2022-49025?
To fix CVE-2022-49025, update your Linux kernel to a vulnerable version that addresses the use-after-free issue.
What versions of the Linux kernel are affected by CVE-2022-49025?
CVE-2022-49025 affects multiple versions of the Linux kernel between 5.3 and 6.1-rc7.
What types of systems might be impacted by CVE-2022-49025?
CVE-2022-49025 could impact any system running an affected version of the Linux kernel, particularly those using the mlx5e driver.
Is there any additional information on CVE-2022-49025?
Additional details on CVE-2022-49025 can be found in the official Linux kernel git repository.