CVE-2022-49030: libbpf: Handle size overflow for ringbuf mmap
In the Linux kernel, the following vulnerability has been resolved:
libbpf: Handle size overflow for ringbuf mmap
The maximum size of ringbuf is 2GB on x86-64 host, so 2 maxentries will overflow u32 when mapping producer page and data pages. Only casting maxentries to sizet is not enough, because for 32-bits application on 64-bits kernel the size of read-only mmap region also could overflow sizet.
So fixing it by casting the size of read-only mmap region into a u64 and checking whether or not there will be overflow during mmap.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.0.12-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49030?
CVE-2022-49030 has a medium severity rating due to the potential for an overflow in size calculations affecting memory mapping.
How do I fix CVE-2022-49030?
To fix CVE-2022-49030, update your Linux kernel to a version later than 6.1-rc7, ensuring a patch that addresses the size overflow is applied.
Which versions of the Linux kernel are affected by CVE-2022-49030?
CVE-2022-49030 affects Linux kernel versions from 5.8 to 6.1-rc7.
What is the impact of CVE-2022-49030 on Linux systems?
The impact of CVE-2022-49030 could potentially allow for memory corruption due to incorrect size handling in mmap operations.
Is CVE-2022-49030 exploitability high?
The exploitability of CVE-2022-49030 is considered moderate, primarily depending on the system configuration and user access levels.