CVE-2022-48743

net: amd-xgbe: Fix skb data length underflow

State: Published
Severity: 8.1 High
Published: Jun 20, 2024
Updated: Aug 5, 2026
Reserved: Jun 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: amd-xgbe: Fix skb data length underflow

There will be BUG_ON() triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected.

Fix this by dropping the packet if such length underflows are seen because of inconsistencies in the hardware descriptors.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.3 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fafc9555d87a19c78bcd43ed731c3a73bf0b37a9 to before 9924c80bd484340191e586110ca22bff23a49f2eAffected 622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 617f9934bb37993b9813832516f318ba874bcb7dAffected 622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 34aeb4da20f93ac80a6291a2dbe7b9c6460e9b26Affected 622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 9892742f035f7aa7dcd2bb0750effa486db89576Affected 622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 4d3fcfe8464838b3920bc2b939d888e0b792934eAffected 622c36f143fc9566ba49d7cec994c2da1182d9e2 to before db6fd92316a254be2097556f01bccecf560e53ceAffected 622c36f143fc9566ba49d7cec994c2da1182d9e2 to before e8f73f620fee5f52653ed2da360121e4446575c5Affected 622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 5aac9108a180fc06e28d4e7fb00247ce603b72eeAffected ae43f9360a21b35cf785ae9a0fdce524d7af0938Affected ae9d577f3dbb686862b7d0dc9cc73054f0964d4dAffected 4.9.19 to before 4.9.300Affected 4.4.58 to before 4.5Affected 4.10.7 to before 4.11Affected
LinuxLinux	4.11Affected before 4.11Not affected 4.9.300 through 4.9.Not affected 4.14.265 through 4.14.Not affected 4.19.228 through 4.19.Not affected 5.4.177 through 5.4.Not affected 5.10.97 through 5.10.Not affected 5.15.20 through 5.15.Not affected 5.16.6 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

fafc9555d87a19c78bcd43ed731c3a73bf0b37a9 to before 9924c80bd484340191e586110ca22bff23a49f2eAffected
622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 617f9934bb37993b9813832516f318ba874bcb7dAffected
622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 34aeb4da20f93ac80a6291a2dbe7b9c6460e9b26Affected
622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 9892742f035f7aa7dcd2bb0750effa486db89576Affected
622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 4d3fcfe8464838b3920bc2b939d888e0b792934eAffected
622c36f143fc9566ba49d7cec994c2da1182d9e2 to before db6fd92316a254be2097556f01bccecf560e53ceAffected
622c36f143fc9566ba49d7cec994c2da1182d9e2 to before e8f73f620fee5f52653ed2da360121e4446575c5Affected
622c36f143fc9566ba49d7cec994c2da1182d9e2 to before 5aac9108a180fc06e28d4e7fb00247ce603b72eeAffected
ae43f9360a21b35cf785ae9a0fdce524d7af0938Affected
ae9d577f3dbb686862b7d0dc9cc73054f0964d4dAffected
4.9.19 to before 4.9.300Affected
4.4.58 to before 4.5Affected
4.10.7 to before 4.11Affected

LinuxLinux

4.11Affected
before 4.11Not affected
4.9.300 through 4.9.*Not affected
4.14.265 through 4.14.*Not affected
4.19.228 through 4.19.*Not affected
5.4.177 through 5.4.*Not affected
5.10.97 through 5.10.*Not affected
5.15.20 through 5.15.*Not affected
5.16.6 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.