CVE-2022-48743
In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG_ON() triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected.
Does this matter?
Lower severity and a low EPSS score (0.65%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG_ON() triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected. Fix this by dropping the packet if such length underflows are seen because of inconsistencies in the hardware descriptors.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.65% probability · 49th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/34aeb4da20f93ac80a6291a2dbe7b9c6460e9b26Mailing List, Patch
- https://git.kernel.org/stable/c/4d3fcfe8464838b3920bc2b939d888e0b792934eMailing List, Patch
- https://git.kernel.org/stable/c/5aac9108a180fc06e28d4e7fb00247ce603b72eeMailing List, Patch
- https://git.kernel.org/stable/c/617f9934bb37993b9813832516f318ba874bcb7dMailing List, Patch
- https://git.kernel.org/stable/c/9892742f035f7aa7dcd2bb0750effa486db89576Mailing List, Patch
- https://git.kernel.org/stable/c/9924c80bd484340191e586110ca22bff23a49f2eMailing List, Patch
- https://git.kernel.org/stable/c/db6fd92316a254be2097556f01bccecf560e53ceMailing List, Patch
- https://git.kernel.org/stable/c/e8f73f620fee5f52653ed2da360121e4446575c5Mailing List, Patch
- https://git.kernel.org/stable/c/34aeb4da20f93ac80a6291a2dbe7b9c6460e9b26Mailing List, Patch
- https://git.kernel.org/stable/c/4d3fcfe8464838b3920bc2b939d888e0b792934eMailing List, Patch
- https://git.kernel.org/stable/c/5aac9108a180fc06e28d4e7fb00247ce603b72eeMailing List, Patch
- https://git.kernel.org/stable/c/617f9934bb37993b9813832516f318ba874bcb7dMailing List, Patch
- https://git.kernel.org/stable/c/9892742f035f7aa7dcd2bb0750effa486db89576Mailing List, Patch
- https://git.kernel.org/stable/c/9924c80bd484340191e586110ca22bff23a49f2eMailing List, Patch
- https://git.kernel.org/stable/c/db6fd92316a254be2097556f01bccecf560e53ceMailing List, Patch
- https://git.kernel.org/stable/c/e8f73f620fee5f52653ed2da360121e4446575c5Mailing List, Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.