Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48934
HistoryAug 22, 2024 - 3:31 a.m.

CVE-2022-48934 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

2024-08-2203:31:28
Linux
github.com
1
linux kernel
vulnerability
nfp
flower
potential leak
error handling

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

ida_simple_get() returns an id between min (0) and max (NFP_MAX_MAC_INDEX)
inclusive.
So NFP_MAX_MAC_INDEX (0xff) is a valid id.

In order for the error handling path to work correctly, the ‘invalid’
value for ‘ida_idx’ should not be in the 0…NFP_MAX_MAC_INDEX range,
inclusive.

So set it to -1.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial