CVE-2022-48807

ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler

published July 16, 2024

CVSS
—
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler

Currently, the same handler is called for both a NETDEV_BONDING_INFO

LAG unlink notification as for a NETDEV_UNREGISTER call. This is

causing a problem though, since the netdev_notifier_info passed has

a different structure depending on which event is passed. The problem

manifests as a call trace from a BUG: KASAN stack-out-of-bounds error.

Fix this by creating a handler specific to NETDEV_UNREGISTER that only

is passed valid elements in the netdev_notifier_info struct for the

NETDEV_UNREGISTER event.

Also included is the removal of an unbalanced dev_put on the peer_netdev

and related braces.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Published
2024-07-16T11:43Z
EPSS history
Timeline
  • 16 JUL 11:43Z
    ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler
    cvelistv5