Riskcovery

CVE-2022-48807

ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler

State
Published
Severity
Not scored
Published
Jul 16, 2024
Updated
May 23, 2026
Reserved
Jul 16, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler

Currently, the same handler is called for both a NETDEV_BONDING_INFO LAG unlink notification as for a NETDEV_UNREGISTER call. This is causing a problem though, since the netdev_notifier_info passed has a different structure depending on which event is passed. The problem manifests as a call trace from a BUG: KASAN stack-out-of-bounds error.

Fix this by creating a handler specific to NETDEV_UNREGISTER that only is passed valid elements in the netdev_notifier_info struct for the NETDEV_UNREGISTER event.

Also included is the removal of an unbalanced dev_put on the peer_netdev and related braces.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6a8b357278f5f8b9817147277ab8f12879dce8a8 to before f9daedc3ab8f673e3a9374b91a89fbf1174df469Affected
  • 6a8b357278f5f8b9817147277ab8f12879dce8a8 to before faa9bcf700ca1a0d09f92502a6b65d3ce313fb46Affected
  • 6a8b357278f5f8b9817147277ab8f12879dce8a8 to before bea1898f65b9b7096cb4e73e97c83b94718f1fa1Affected
  • e83b3cce4722b880c277d44b13eebf2548cb2ebbAffected
  • 5.14.16 to before 5.15Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.24 through 5.15.*Not affected
  • 5.16.10 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.