CVE-2022-49030CWE-190

CVE-2022-49030

High · published October 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

libbpf: Handle size overflow for ringbuf mmap

The maximum size of ringbuf is 2GB on x86-64 host, so 2 * max_entries

will overflow u32 when mapping producer page and data pages. Only

casting max_entries to size_t is not enough, because for 32-bits

application on 64-bits kernel the size of read-only mmap region

also could overflow size_t.

So fixing it by casting the size of read-only mmap region into a __u64

and checking whether or not there will be overflow during mmap.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-10-22T00:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.8, < 5.10.1585.10.158
linux/linux_kernel≥ 5.11, < 5.15.825.15.82
linux/linux_kernel≥ 5.16, < 6.0.126.0.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 21 OCT 20:06Z
    libbpf: Handle size overflow for ringbuf mmap
    cvelistv5