CVE-2022-48883CWE-129

CVE-2022-48883

High · published August 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent

A user is able to configure an arbitrary number of rx queues when

creating an interface via netlink. This doesn't work for child PKEY

interfaces because the child interface uses the parent receive channels.

Although the child shares the parent's receive channels, the number of

rx queues is important for the channel_stats array: the parent's rx

channel index is used to access the child's channel_stats. So the array

has to be at least as large as the parent's rx queue size for the

counting to work correctly and to prevent out of bound accesses.

This patch checks for the mentioned scenario and returns an error when

trying to create the interface. The error is propagated to the user.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-08-21T11:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.17, < 6.1.76.1.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 21 AUG 06:10Z
    net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent
    cvelistv5