CVE-2022-48949

igb: Initialize mailbox message for VF reset

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

igb: Initialize mailbox message for VF reset

When a MAC address is not assigned to the VF, that portion of the message

sent to the VF is not set. The memory, however, is allocated from the

stack meaning that information may be leaked to the VM. Initialize the

message buffer to 0 so that no information is passed to the VM in this

case.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.8th percentile
Published
2024-10-21T20:05Z
EPSS history
Timeline
  • 21 OCT 20:05Z
    igb: Initialize mailbox message for VF reset
    cvelistv5