CVE-2022-48807

In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handler is called for both a NETDEV_BONDING_INFO LAG unlink notification as for a NETDEV_UNREGISTER call. This is causing a problem though, since the netdev_notifier_info passed has a different structure depending on which event is passed. The problem manifests as a call trace from a BUG: KASAN stack-out-of-bounds error. Fix this by creating a handler specific to NETDEV_UNREGISTER that only is passed valid elements in the netdev_notifier_info struct for the NETDEV_UNREGISTER event. Also included is the removal of an unbalanced dev_put on the peer_netdev and related braces.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/bea1898f65b9b7096cb4e73e97c83b94718f1fa1
https://git.kernel.org/stable/c/f9daedc3ab8f673e3a9374b91a89fbf1174df469
https://git.kernel.org/stable/c/faa9bcf700ca1a0d09f92502a6b65d3ce313fb46

Configurations

No configuration.

History

No history.

Information

Published : 2024-07-16 12:15

Updated : 2024-07-16 13:43

NVD link : CVE-2022-48807

Mitre link : CVE-2022-48807

CVE.ORG link : CVE-2022-48807

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2022-48807", "cveTags": [], "metrics": {}, "published": "2024-07-16T12:15:05.050", "references": [{"url": "https://git.kernel.org/stable/c/bea1898f65b9b7096cb4e73e97c83b94718f1fa1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f9daedc3ab8f673e3a9374b91a89fbf1174df469", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/faa9bcf700ca1a0d09f92502a6b65d3ce313fb46", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix KASAN error in LAG NETDEV_UNREGISTER handler\n\nCurrently, the same handler is called for both a NETDEV_BONDING_INFO\nLAG unlink notification as for a NETDEV_UNREGISTER call. This is\ncausing a problem though, since the netdev_notifier_info passed has\na different structure depending on which event is passed. The problem\nmanifests as a call trace from a BUG: KASAN stack-out-of-bounds error.\n\nFix this by creating a handler specific to NETDEV_UNREGISTER that only\nis passed valid elements in the netdev_notifier_info struct for the\nNETDEV_UNREGISTER event.\n\nAlso included is the removal of an unbalanced dev_put on the peer_netdev\nand related braces."}, {"lang": "es", "value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: ice: Solucionar error KASAN en el controlador LAG NETDEV_UNREGISTER Actualmente, se llama al mismo controlador tanto para una notificaci\u00f3n de desvinculaci\u00f3n de NETDEV_BONDING_INFO LAG como para una llamada NETDEV_UNREGISTER. Sin embargo, esto est\u00e1 causando un problema, ya que el netdev_notifier_info pasado tiene una estructura diferente seg\u00fan el evento que se pasa. El problema se manifiesta como un seguimiento de llamada de un ERROR: error de pila fuera de los l\u00edmites de KASAN. Solucione este problema creando un controlador espec\u00edfico para NETDEV_UNREGISTER al que solo se le pasan elementos v\u00e1lidos en la estructura netdev_notifier_info para el evento NETDEV_UNREGISTER. Tambi\u00e9n se incluye la eliminaci\u00f3n de un dev_put desequilibrado en peer_netdev y llaves relacionadas."}], "lastModified": "2024-07-16T13:43:58.773", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}