CVE-2022-48686

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the iowork loop when we set rdenabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sync or corrupted...

CVE-2022-48686

CVE-2022-48686 : In the Linux kernel, the nvme-tcp path fixed a use-after-free (UAF) when detecting digest errors. The patch also adds a safeguard to bail from the io_work loop when rd_enabled becomes true, avoiding reads from a TCP socket that is out-of-sync or corrupted. Concrete details across...