From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 2B0721AB36C for ; Thu, 20 Jun 2024 11:17:28 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718882249; cv=none; b=toNvocSqi4hrplzTk5ZSwhBsEAbCSdvzp8oDV5MOlxMYVW4q2OQV0hBSc3bhR4AsIOE20tLP3i6yeIxuEEfEdixJmFA4UoR8MaEtg3wc6qqGz1Hi73G9ryA9BHXNftAzuBO7hlziUQWPNosBcNIPEWhud+Wd9/pstW5hu7I3V9g= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718882249; c=relaxed/simple; bh=3AXGpWltSRByc70gUYiXcSqqJ5ryk24KSgUumbjQzXc=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=Eym86HtwBakYhDx7HVklKIx0y8R1A1GK7ITk3v7J0hZV33fup6NP2rjBkmpuhpKS2lOaMCnDi70jbCb+3mGc74H4/+Djx7BjQy2uPSBYO/AQJLL7X6LOz7NVPUnnRtyC4W+x+AGZ8wmV7Htw7LcNO+aFzJDsgJ1WnKVtLDHl1Ug= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=b/nOWaL/; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="b/nOWaL/" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 6E87DC32781; Thu, 20 Jun 2024 11:17:28 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1718882248; bh=3AXGpWltSRByc70gUYiXcSqqJ5ryk24KSgUumbjQzXc=; h=From:To:Cc:Subject:Date:Reply-to:From; b=b/nOWaL/UW9nnhYbN8HJvqk0GVh3+5hAQNvsk+IjFaZJEJ7cPuHOglEWg/fMUkW5m kAdsXvBdsFSbbdevmxkJiOpttMsKH8u5IVv2zZmBCbPY9SPNrT6vl9/OlCfKakcX+k BI6m3FRcOmYPcwK5FOY2DRE3Zz6Bfx9v968V6Tgc= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow Date: Thu, 20 Jun 2024 13:16:23 +0200 Message-ID: <2024062003-CVE-2022-48743-ee30@gregkh> X-Mailer: git-send-email 2.45.2 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=3073; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=3AXGpWltSRByc70gUYiXcSqqJ5ryk24KSgUumbjQzXc=; b=owGbwMvMwCRo6H6F97bub03G02pJDGkl/MXzfk1jWbCUr2ya9f1/sx86xJv5GSlwCRZ368lsl 3ZuVd3fEcvCIMjEICumyPJlG8/R/RWHFL0MbU/DzGFlAhnCwMUpABPZfIRhfs4m12XLvA6ICGXH sS33Ng16zh5twzC/5Mdlz9VXneU+iS6ftXX9gsfX7RiyAA== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG_ON() triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected. Fix this by dropping the packet if such length underflows are seen because of inconsistencies in the hardware descriptors. The Linux kernel CVE team has assigned CVE-2022-48743 to this issue. Affected and fixed versions =========================== Issue introduced in 4.9.19 with commit fafc9555d87a and fixed in 4.9.300 with commit 9924c80bd484 Issue introduced in 4.11 with commit 622c36f143fc and fixed in 4.14.265 with commit 617f9934bb37 Issue introduced in 4.11 with commit 622c36f143fc and fixed in 4.19.228 with commit 34aeb4da20f9 Issue introduced in 4.11 with commit 622c36f143fc and fixed in 5.4.177 with commit 9892742f035f Issue introduced in 4.11 with commit 622c36f143fc and fixed in 5.10.97 with commit 4d3fcfe84648 Issue introduced in 4.11 with commit 622c36f143fc and fixed in 5.15.20 with commit db6fd92316a2 Issue introduced in 4.11 with commit 622c36f143fc and fixed in 5.16.6 with commit e8f73f620fee Issue introduced in 4.11 with commit 622c36f143fc and fixed in 5.17 with commit 5aac9108a180 Issue introduced in 4.4.58 with commit ae43f9360a21 Issue introduced in 4.10.7 with commit ae9d577f3dbb Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-48743 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/net/ethernet/amd/xgbe/xgbe-drv.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/9924c80bd484340191e586110ca22bff23a49f2e https://git.kernel.org/stable/c/617f9934bb37993b9813832516f318ba874bcb7d https://git.kernel.org/stable/c/34aeb4da20f93ac80a6291a2dbe7b9c6460e9b26 https://git.kernel.org/stable/c/9892742f035f7aa7dcd2bb0750effa486db89576 https://git.kernel.org/stable/c/4d3fcfe8464838b3920bc2b939d888e0b792934e https://git.kernel.org/stable/c/db6fd92316a254be2097556f01bccecf560e53ce https://git.kernel.org/stable/c/e8f73f620fee5f52653ed2da360121e4446575c5 https://git.kernel.org/stable/c/5aac9108a180fc06e28d4e7fb00247ce603b72ee