In the Linux kernel, the following vulnerability has been resolved:
net: mvneta: Prevent out of bounds read in mvnetaconfigrss()
The pp->indir[0] value comes from the user. It is passed to:
if (cpu_online(pp->rxq_def))
inside the mvnetapercpuelect() function. It needs bounds checkeding to ensure that it is not beyond the end of the cpu bitmap.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6b30598fec84f8809f5417cde73071ca43e8471",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-028dab60",
"signature_type": "Function",
"digest": {
"length": 870.0,
"function_hash": "23960330764730101790768987318945735627"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca0a506dddc3e1d636935eef339576b263bf3d8",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-0eb1c627",
"signature_type": "Function",
"digest": {
"length": 870.0,
"function_hash": "23960330764730101790768987318945735627"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8b4fc13900b8e8be48debffd0dfd391772501f7",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-1126c701",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319272890619105508529076759554104781031",
"47580424117280468948026872985831158010",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ceffb8f410b93553fb16fe7e84aa0d35b3ba79b",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-2f6c6df2",
"signature_type": "Function",
"digest": {
"length": 683.0,
"function_hash": "334596115835946593510136220244902411892"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a142486a0db6b0b85031f22d69acd0cdcf8f72b",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-3e6f03e7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319272890619105508529076759554104781031",
"47580424117280468948026872985831158010",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-4e650f49",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319272890619105508529076759554104781031",
"47580424117280468948026872985831158010",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-539e328e",
"signature_type": "Function",
"digest": {
"length": 870.0,
"function_hash": "23960330764730101790768987318945735627"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92c",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-639fb065",
"signature_type": "Function",
"digest": {
"length": 683.0,
"function_hash": "334596115835946593510136220244902411892"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6b30598fec84f8809f5417cde73071ca43e8471",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-7749056a",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319272890619105508529076759554104781031",
"47580424117280468948026872985831158010",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a142486a0db6b0b85031f22d69acd0cdcf8f72b",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-86d36bd3",
"signature_type": "Function",
"digest": {
"length": 870.0,
"function_hash": "23960330764730101790768987318945735627"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca0a506dddc3e1d636935eef339576b263bf3d8",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-98971fab",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319272890619105508529076759554104781031",
"47580424117280468948026872985831158010",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ceffb8f410b93553fb16fe7e84aa0d35b3ba79b",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-b3208a2d",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251572063802280612134107168168440879112",
"302295937943228234342029116102859138750",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@146ebee8fcdb349d7ec0e49915e6cdafb92544ae",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-b8eb3230",
"signature_type": "Function",
"digest": {
"length": 870.0,
"function_hash": "23960330764730101790768987318945735627"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@146ebee8fcdb349d7ec0e49915e6cdafb92544ae",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-f61b78b0",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319272890619105508529076759554104781031",
"47580424117280468948026872985831158010",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92c",
"target": {
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-fab3c01c",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251572063802280612134107168168440879112",
"302295937943228234342029116102859138750",
"209940136624647772004033802633524572631"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8b4fc13900b8e8be48debffd0dfd391772501f7",
"target": {
"function": "mvneta_config_rss",
"file": "drivers/net/ethernet/marvell/mvneta.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-48966-fede44e7",
"signature_type": "Function",
"digest": {
"length": 870.0,
"function_hash": "23960330764730101790768987318945735627"
}
}
]