CVE-2022-48807

MEDIUM EPSS 20.5%
Published Jul 16, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jul 16, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handler is called for both a NETDEV_BONDING_INFO LAG unlink notification as for a NETDEV_UNREGISTER call. This is causing a problem though, since the netdev_notifier_info passed has a different structure depending on which event is passed. The problem manifests as a call trace from a BUG: KASAN stack-out-of-bounds error. Fix this by creating a handler specific to NETDEV_UNREGISTER that only is passed valid elements in the netdev_notifier_info struct for the NETDEV_UNREGISTER event. Also included is the removal of an unbalanced dev_put on the peer_netdev and related braces.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
20.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-908

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥5.14.16  –  <5.15
linuxlinux_kernel*≥5.15.1  –  <5.15.24
linuxlinux_kernel*≥5.16  –  <5.16.10
linuxlinux_kernel5.15any
linuxlinux_kernel5.17any
linuxlinux_kernel5.17any
linuxlinux_kernel5.17any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/bea1898f65b9b7096cb4e73e97c83b94718f1fa1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f9daedc3ab8f673e3a9374b91a89fbf1174df469
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/faa9bcf700ca1a0d09f92502a6b65d3ce313fb46
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/bea1898f65b9b7096cb4e73e97c83b94718f1fa1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f9daedc3ab8f673e3a9374b91a89fbf1174df469
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/faa9bcf700ca1a0d09f92502a6b65d3ce313fb46
    Patch