CVE-2022-49368

net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()

State: Published
Severity: 7.1 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()

The "fsp->location" variable comes from user via ethtool_get_rxnfc(). Check that it is valid to prevent an out of bounds read.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before b4f0e57ea0d867aacffad7999527e48bd4ea9293Affected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 5ba81f82607ead85fe36f50869fc4f5661359ab8Affected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 657e7174603f0aab2cdedc64ac81edffd2a87afeAffected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 2bd1faedb74dc2a2be3972abcd4239b75a3e7b00Affected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 71ae30662ec610b92644d13f79c78f76f17873b3Affected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before b24ca1cf846273361d5bd73a35de95a486a54b6dAffected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 4cde554c70d7397cfa2e4116bacb4accdfb6fd48Affected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 0b238f75b65ed4462ef4cdfa718cac0ac7fce3b8Affected 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before e7e7104e2d5ddf3806a28695670f21bef471f1e1Affected
LinuxLinux	4.9Affected before 4.9Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before b4f0e57ea0d867aacffad7999527e48bd4ea9293Affected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 5ba81f82607ead85fe36f50869fc4f5661359ab8Affected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 657e7174603f0aab2cdedc64ac81edffd2a87afeAffected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 2bd1faedb74dc2a2be3972abcd4239b75a3e7b00Affected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 71ae30662ec610b92644d13f79c78f76f17873b3Affected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before b24ca1cf846273361d5bd73a35de95a486a54b6dAffected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 4cde554c70d7397cfa2e4116bacb4accdfb6fd48Affected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before 0b238f75b65ed4462ef4cdfa718cac0ac7fce3b8Affected
7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to before e7e7104e2d5ddf3806a28695670f21bef471f1e1Affected

LinuxLinux

4.9Affected
before 4.9Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.