CVE-2022-48690

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/05/2024
Last modified:
19/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ice: Fix DMA mappings leak<br /> <br /> Fix leak, when user changes ring parameters.<br /> During reallocation of RX buffers, new DMA mappings are created for<br /> those buffers. New buffers with different RX ring count should<br /> substitute older ones, but those buffers were freed in ice_vsi_cfg_rxq<br /> and reallocated again with ice_alloc_rx_buf. kfree on rx_buf caused<br /> leak of already mapped DMA.<br /> Reallocate ZC with xdp_buf struct, when BPF program loads. Reallocate<br /> back to rx_buf, when BPF program unloads.<br /> If BPF program is loaded/unloaded and XSK pools are created, reallocate<br /> RX queues accordingly in XDP_SETUP_XSK_POOL handler.<br /> <br /> Steps for reproduction:<br /> while :<br /> do<br /> for ((i=0; i

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16.1 (including) 5.19.9 (excluding)
cpe:2.3:o:linux:linux_kernel:5.16:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*