CVE-2022-49583: iavf: Fix handling of dummy receive descriptors
In the Linux kernel, the following vulnerability has been resolved:
iavf: Fix handling of dummy receive descriptors
Fix memory leak caused by not handling dummy receive descriptor properly. iavfgetrxbuffer now sets the rxbuffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen.
[Jesse: massaged commit message]
Affected Software
Remediation
Event History
Frequently Asked Questions
Which systems are exposed to the leak?
The issue affects Linux kernel systems using the iavf driver when the hardware writes a dummy receive descriptor. The event is described as unlikely, but it can occur.
What is the operational impact if it occurs?
A page allocated for the previous receive buffer is not freed, causing a memory leak. The CVSS vector indicates local access, low attack complexity, low privileges, no user interaction, and high availability impact.
What can be done to remediate the issue?
Apply an available patch that updates iavf_get_rx_buffer to set the rx_buffer return value for dummy receive descriptors, allowing the prior receive-buffer page to be freed.