CVE-2022-48882

net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)

published August 21, 2024

CVSS
—
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)

Upon updating MAC security entity (SecY) in hw offload path, the macsec

security association (SA) initialization routine is called. In case of

extended packet number (epn) is enabled the salt and ssci attributes are

retrieved using the MACsec driver rx_sa context which is unavailable when

updating a SecY property such as encoding-sa hence the null dereference.

Fix by using the provided SA to set those attributes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00205 · 10.0th percentile
Published
2024-08-21T06:10Z
EPSS history
Timeline
  • 21 AUG 06:10Z
    net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)
    cvelistv5