CVE-2022-49642

Severity CVSS v4.0:
Pending analysis
Type:
CWE-190 Integer Overflow or Wraparound
Publication date:
26/02/2025
Last modified:
23/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: stmmac: dwc-qos: Disable split header for Tegra194<br /> <br /> There is a long-standing issue with the Synopsys DWC Ethernet driver<br /> for Tegra194 where random system crashes have been observed [0]. The<br /> problem occurs when the split header feature is enabled in the stmmac<br /> driver. In the bad case, a larger than expected buffer length is<br /> received and causes the calculation of the total buffer length to<br /> overflow. This results in a very large buffer length that causes the<br /> kernel to crash. Why this larger buffer length is received is not clear,<br /> however, the feedback from the NVIDIA design team is that the split<br /> header feature is not supported for Tegra194. Therefore, disable split<br /> header support for Tegra194 to prevent these random crashes from<br /> occurring.<br /> <br /> [0] https://lore.kernel.org/linux-tegra/b0b17697-f23e-8fa5-3757-604a86f3a095@nvidia.com/

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.4 (including) 5.4.207 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.132 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.56 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.18.13 (excluding)
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*