CVE-2022-48966

net: mvneta: Prevent out of bounds read in mvneta_config_rss()

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mvneta: Prevent out of bounds read in mvneta_config_rss()

The pp->indir[0] value comes from the user. It is passed to:

if (cpu_online(pp->rxq_def))

inside the mvneta_percpu_elect() function. It needs bounds checkeding to ensure that it is not beyond the end of the cpu bitmap.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cad5d847a093077b499a8b0bbfe6804b9226c03e to before 3ceffb8f410b93553fb16fe7e84aa0d35b3ba79bAffected cad5d847a093077b499a8b0bbfe6804b9226c03e to before 47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92cAffected cad5d847a093077b499a8b0bbfe6804b9226c03e to before 5a142486a0db6b0b85031f22d69acd0cdcf8f72bAffected cad5d847a093077b499a8b0bbfe6804b9226c03e to before eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50Affected cad5d847a093077b499a8b0bbfe6804b9226c03e to before 146ebee8fcdb349d7ec0e49915e6cdafb92544aeAffected cad5d847a093077b499a8b0bbfe6804b9226c03e to before a6b30598fec84f8809f5417cde73071ca43e8471Affected cad5d847a093077b499a8b0bbfe6804b9226c03e to before 6ca0a506dddc3e1d636935eef339576b263bf3d8Affected cad5d847a093077b499a8b0bbfe6804b9226c03e to before e8b4fc13900b8e8be48debffd0dfd391772501f7Affected
LinuxLinux	4.5Affected before 4.5Not affected 4.9.336 through 4.9.Not affected 4.14.302 through 4.14.Not affected 4.19.269 through 4.19.Not affected 5.4.227 through 5.4.Not affected 5.10.159 through 5.10.Not affected 5.15.83 through 5.15.Not affected 6.0.13 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

cad5d847a093077b499a8b0bbfe6804b9226c03e to before 3ceffb8f410b93553fb16fe7e84aa0d35b3ba79bAffected
cad5d847a093077b499a8b0bbfe6804b9226c03e to before 47a1a2f6cd5ec3a4f8a2d9bfa1e0605347cdb92cAffected
cad5d847a093077b499a8b0bbfe6804b9226c03e to before 5a142486a0db6b0b85031f22d69acd0cdcf8f72bAffected
cad5d847a093077b499a8b0bbfe6804b9226c03e to before eec1fc21edc2bb99c9e66cf66f0b5d4d643fbb50Affected
cad5d847a093077b499a8b0bbfe6804b9226c03e to before 146ebee8fcdb349d7ec0e49915e6cdafb92544aeAffected
cad5d847a093077b499a8b0bbfe6804b9226c03e to before a6b30598fec84f8809f5417cde73071ca43e8471Affected
cad5d847a093077b499a8b0bbfe6804b9226c03e to before 6ca0a506dddc3e1d636935eef339576b263bf3d8Affected
cad5d847a093077b499a8b0bbfe6804b9226c03e to before e8b4fc13900b8e8be48debffd0dfd391772501f7Affected

LinuxLinux

4.5Affected
before 4.5Not affected
4.9.336 through 4.9.*Not affected
4.14.302 through 4.14.*Not affected
4.19.269 through 4.19.*Not affected
5.4.227 through 5.4.*Not affected
5.10.159 through 5.10.*Not affected
5.15.83 through 5.15.*Not affected
6.0.13 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.