CVE-2022-49583: iavf: Fix handling of dummy receive descriptors
Published Feb 26, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
iavf: Fix handling of dummy receive descriptors
Fix memory leak caused by not handling dummy receive descriptor properly. iavfgetrxbuffer now sets the rxbuffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen.
[Jesse: massaged commit message]
Affected Software
12 affected components
Linux Linux kernel>=5.1.20<5.2
Linux Linux kernel>=5.2.3<5.4.208
Linux Linux kernel>=5.5<5.10.134
Linux Linux kernel>=5.11<5.15.58
Linux Linux kernel>=5.16<5.18.15
Linux Linux kernel=5.19-rc1
Linux Linux kernel=5.19-rc2
Linux Linux kernel=5.19-rc3
Linux Linux kernel=5.19-rc4
Linux Linux kernel=5.19-rc5
Linux Linux kernel=5.19-rc6
Linux Linux kernel=5.19-rc7
Remediation
Event History
Feb 26, 2025
CVE Published
via MITRE·02:23 AM
Data Sourced
via MITRE·02:23 AM
Description
Data Sourced
via NVD·07:01 AM
RemedyDescriptionSeverityWeaknessAffected Software