In the Linux kernel, the following vulnerability has been resolved:
iavf: Fix handling of dummy receive descriptors
Fix memory leak caused by not handling dummy receive descriptor properly. iavfgetrxbuffer now sets the rxbuffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen.
[Jesse: massaged commit message]
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9f49e0060301a9bfebeca76739158d0cf91cdf6",
"target": {
"function": "iavf_get_rx_buffer",
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-2acc2dde",
"digest": {
"length": 322.0,
"function_hash": "108328006817806440052424247842994666596"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6af94324911ef0846af1a5ce5e049ca736db34b",
"target": {
"function": "iavf_get_rx_buffer",
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-4bff2dbd",
"digest": {
"length": 322.0,
"function_hash": "108328006817806440052424247842994666596"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2918419c06088f6709ceb543feb01752779ade4c",
"target": {
"function": "iavf_get_rx_buffer",
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-4cc83446",
"digest": {
"length": 322.0,
"function_hash": "108328006817806440052424247842994666596"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6edb818732fc05fda495f5b3a749bd1cee01398b",
"target": {
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-4ef0c0b1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322667026969656100683389051099521395898",
"320972529536865811971563151361478700100",
"203314948574892712658141759243659912219",
"275826158981986557040512601184001743479",
"496433414824244188065779981063137887",
"277119396155834006828795220994293341707",
"154930969389913854101404011606277716289"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d88d59faf4e6f9cc4767664206afdb999b10ec77",
"target": {
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-699fefef",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322667026969656100683389051099521395898",
"320972529536865811971563151361478700100",
"203314948574892712658141759243659912219",
"275826158981986557040512601184001743479",
"496433414824244188065779981063137887",
"277119396155834006828795220994293341707",
"154930969389913854101404011606277716289"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d88d59faf4e6f9cc4767664206afdb999b10ec77",
"target": {
"function": "iavf_get_rx_buffer",
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-764e31cc",
"digest": {
"length": 322.0,
"function_hash": "108328006817806440052424247842994666596"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6edb818732fc05fda495f5b3a749bd1cee01398b",
"target": {
"function": "iavf_get_rx_buffer",
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-8c9b2943",
"digest": {
"length": 322.0,
"function_hash": "108328006817806440052424247842994666596"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6af94324911ef0846af1a5ce5e049ca736db34b",
"target": {
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-9a988d9b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322667026969656100683389051099521395898",
"320972529536865811971563151361478700100",
"203314948574892712658141759243659912219",
"275826158981986557040512601184001743479",
"496433414824244188065779981063137887",
"277119396155834006828795220994293341707",
"154930969389913854101404011606277716289"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9f49e0060301a9bfebeca76739158d0cf91cdf6",
"target": {
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-b2643e48",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322667026969656100683389051099521395898",
"320972529536865811971563151361478700100",
"203314948574892712658141759243659912219",
"275826158981986557040512601184001743479",
"496433414824244188065779981063137887",
"277119396155834006828795220994293341707",
"154930969389913854101404011606277716289"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2918419c06088f6709ceb543feb01752779ade4c",
"target": {
"file": "drivers/net/ethernet/intel/iavf/iavf_txrx.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49583-f221860d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322667026969656100683389051099521395898",
"320972529536865811971563151361478700100",
"203314948574892712658141759243659912219",
"275826158981986557040512601184001743479",
"496433414824244188065779981063137887",
"277119396155834006828795220994293341707",
"154930969389913854101404011606277716289"
]
},
"signature_type": "Line"
}
]