Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-48690
HistoryMay 03, 2024 - 12:00 a.m.

CVE-2022-48690

2024-05-0300:00:00
ubuntu.com
ubuntu.com
5
linux kernel
ice
vulnerability
dma mappings
fix
ring parameters
rx buffers
reallocation
bpf program
xsk pools
ethtool
reproduction steps

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

In the Linux kernel, the following vulnerability has been resolved: ice:
Fix DMA mappings leak Fix leak, when user changes ring parameters. During
reallocation of RX buffers, new DMA mappings are created for those buffers.
New buffers with different RX ring count should substitute older ones, but
those buffers were freed in ice_vsi_cfg_rxq and reallocated again with
ice_alloc_rx_buf. kfree on rx_buf caused leak of already mapped DMA.
Reallocate ZC with xdp_buf struct, when BPF program loads. Reallocate back
to rx_buf, when BPF program unloads. If BPF program is loaded/unloaded and
XSK pools are created, reallocate RX queues accordingly in
XDP_SETUP_XSK_POOL handler. Steps for reproduction: while : do for ((i=0;
i<=8160; i=i+32)) do ethtool -G enp130s0f0 rx $i tx $i sleep 0.5 ethtool -g
enp130s0f0 done done

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

Related for UB:CVE-2022-48690