In the Linux kernel, the following vulnerability has been resolved:
nfp: flower: Fix a potential leak in nfptunneladdsharedmac()
idasimpleget() returns an id between min (0) and max (NFPMAXMACINDEX) inclusive. So NFPMAXMACINDEX (0xff) is a valid id.
In order for the error handling path to work correctly, the 'invalid' value for 'idaidx' should not be in the 0..NFPMAXMACINDEX range, inclusive.
So set it to -1.
[
{
"id": "CVE-2022-48934-3bac5288",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"112428306268857129135675456923552519679",
"262160313326247453771257599529850265045",
"253524643887526880170868773524071845477",
"219526684114845258467302446437639249643",
"302063346919587378066589469747190944962",
"233611195596572137622964535653817866310",
"235695515608701010548135557692616994804",
"272234023441667256352903810081255587753",
"219306834116213849052706057417337660863"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af4bc921d39dffdb83076e0a7eed1321242b7d87",
"signature_type": "Line"
},
{
"id": "CVE-2022-48934-71529431",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1500.0,
"function_hash": "55621117715795028189486278649467779841"
},
"target": {
"function": "nfp_tunnel_add_shared_mac",
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af4bc921d39dffdb83076e0a7eed1321242b7d87",
"signature_type": "Function"
},
{
"id": "CVE-2022-48934-8bfd0ad4",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1500.0,
"function_hash": "55621117715795028189486278649467779841"
},
"target": {
"function": "nfp_tunnel_add_shared_mac",
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ad5886f85b6bd893e3ed19013765fb0c243c069",
"signature_type": "Function"
},
{
"id": "CVE-2022-48934-a4a8d261",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"112428306268857129135675456923552519679",
"262160313326247453771257599529850265045",
"253524643887526880170868773524071845477",
"219526684114845258467302446437639249643",
"302063346919587378066589469747190944962",
"233611195596572137622964535653817866310",
"235695515608701010548135557692616994804",
"272234023441667256352903810081255587753",
"219306834116213849052706057417337660863"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d8097caa73200710d52b9f4d9f430548f46a900",
"signature_type": "Line"
},
{
"id": "CVE-2022-48934-ae7968c9",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1500.0,
"function_hash": "55621117715795028189486278649467779841"
},
"target": {
"function": "nfp_tunnel_add_shared_mac",
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a14d0888eb4b0045884126acc69abfb7b87814d",
"signature_type": "Function"
},
{
"id": "CVE-2022-48934-c45c44d1",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"112428306268857129135675456923552519679",
"262160313326247453771257599529850265045",
"253524643887526880170868773524071845477",
"219526684114845258467302446437639249643",
"302063346919587378066589469747190944962",
"233611195596572137622964535653817866310",
"235695515608701010548135557692616994804",
"272234023441667256352903810081255587753",
"219306834116213849052706057417337660863"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ad5886f85b6bd893e3ed19013765fb0c243c069",
"signature_type": "Line"
},
{
"id": "CVE-2022-48934-cd907140",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1500.0,
"function_hash": "55621117715795028189486278649467779841"
},
"target": {
"function": "nfp_tunnel_add_shared_mac",
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d8097caa73200710d52b9f4d9f430548f46a900",
"signature_type": "Function"
},
{
"id": "CVE-2022-48934-df9af447",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"112428306268857129135675456923552519679",
"262160313326247453771257599529850265045",
"253524643887526880170868773524071845477",
"219526684114845258467302446437639249643",
"302063346919587378066589469747190944962",
"233611195596572137622964535653817866310",
"235695515608701010548135557692616994804",
"272234023441667256352903810081255587753",
"219306834116213849052706057417337660863"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4086d2433576baf85f0e538511df97c8101e0a10",
"signature_type": "Line"
},
{
"id": "CVE-2022-48934-ef98b21d",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"112428306268857129135675456923552519679",
"262160313326247453771257599529850265045",
"253524643887526880170868773524071845477",
"219526684114845258467302446437639249643",
"302063346919587378066589469747190944962",
"233611195596572137622964535653817866310",
"235695515608701010548135557692616994804",
"272234023441667256352903810081255587753",
"219306834116213849052706057417337660863"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a14d0888eb4b0045884126acc69abfb7b87814d",
"signature_type": "Line"
},
{
"id": "CVE-2022-48934-f0e8544c",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1500.0,
"function_hash": "55621117715795028189486278649467779841"
},
"target": {
"function": "nfp_tunnel_add_shared_mac",
"file": "drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4086d2433576baf85f0e538511df97c8101e0a10",
"signature_type": "Function"
}
]