In the Linux kernel, the following vulnerability has been resolved:
net: lantiq_xrx200: restore buffer if memory allocation failed
In a situation where memory allocation fails, an invalid buffer address is stored. When this descriptor is used again, the system panics in the build_skb() function when accessing memory.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49997.json",
"cna_assigner": "Linux"
}[
{
"id": "CVE-2022-49997-11aad0d7",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9c3b1775f80fa21f5bff874027d2ccb10f5d90c",
"target": {
"file": "drivers/net/ethernet/lantiq_xrx200.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"199819259482684448611435334998657161540",
"176906248583590040689088143427168475319",
"217338917777787406382720216131218699977",
"168351253834932156321056785335905862164"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-49997-25323e93",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ef2786e32d93e562cd40601248a14ae090de873",
"target": {
"function": "xrx200_alloc_buf",
"file": "drivers/net/ethernet/lantiq_xrx200.c"
},
"digest": {
"length": 911.0,
"function_hash": "269517169776367496961512140419523847152"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-49997-706ed9b3",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ef2786e32d93e562cd40601248a14ae090de873",
"target": {
"file": "drivers/net/ethernet/lantiq_xrx200.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"199819259482684448611435334998657161540",
"176906248583590040689088143427168475319",
"217338917777787406382720216131218699977",
"168351253834932156321056785335905862164"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-49997-db1c69c9",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9c3b1775f80fa21f5bff874027d2ccb10f5d90c",
"target": {
"function": "xrx200_alloc_buf",
"file": "drivers/net/ethernet/lantiq_xrx200.c"
},
"digest": {
"length": 911.0,
"function_hash": "269517169776367496961512140419523847152"
},
"signature_type": "Function"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49997.json"