7.8

CVE-2022-48686

nvme-tcp: fix UAF when detecting digest errors

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix UAF when detecting digest errors

We should also bail from the io_work loop when we set rd_enabled to true,
so we don't attempt to read data from the socket when the TCP stream is
already out-of-sync or corrupted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.0 < 5.4.213
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.143
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.68
Linux ≫ Linux Kernel Version >= 5.16 < 5.19.9
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.161
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://git.kernel.org/stable/c/13c80a6c112467bab5e44d090767930555fc17a5
Patch
https://git.kernel.org/stable/c/160f3549a907a50e51a8518678ba2dcf2541abea
Patch
https://git.kernel.org/stable/c/19816a0214684f70b49b25075ff8c402fdd611d3
Patch
https://git.kernel.org/stable/c/5914fa32ef1b7766fea933f9eed94ac5c00aa7ff
Patch
https://git.kernel.org/stable/c/c3eb461aa56e6fa94fb80442ba2586bd223a8886
Patch