CVE-2022-49583

iavf: Fix handling of dummy receive descriptors

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix handling of dummy receive descriptors

Fix memory leak caused by not handling dummy receive descriptor properly.

iavf_get_rx_buffer now sets the rx_buffer return value for dummy receive

descriptors. Without this patch, when the hardware writes a dummy

descriptor, iavf would not free the page allocated for the previous receive

buffer. This is an unlikely event but can still happen.

[Jesse: massaged commit message]

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Published
2025-02-26T02:23Z
EPSS history
Timeline
  • 26 FEB 02:23Z
    iavf: Fix handling of dummy receive descriptors
    cvelistv5