Riskcovery

CVE-2022-50040

net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

If an error occurs in dsa_devlink_region_create(), then 'priv->regions' array will be accessed by negative index '-1'.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bf425b82059e0b0752c0026353c1902112200837 to before 7983e1e44cb322eba6af84160b6d18df80603fb8Affected
  • bf425b82059e0b0752c0026353c1902112200837 to before e84c6321f3578c38cb3c24258db91a92672b17a8Affected
  • bf425b82059e0b0752c0026353c1902112200837 to before 79f86b862416126a2e826cb74224180d6625a32fAffected
  • bf425b82059e0b0752c0026353c1902112200837 to before fd8e899cdb5ecaf8e8ee73854a99e10807eef1deAffected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.138 through 5.10.*Not affected
  • 5.15.63 through 5.15.*Not affected
  • 5.19.4 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.