CVE-2022-48890

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a swiotlb bounce buffer leak in confidential VMs. The storvsc queuecommand() function maps the scatter/gather list using scsi dma map(), which allocates swiotlb bounce buffers in a confidential VM. If the I/O submission fails in storvsc do io(), the I/O is typically retried by higher-level code, but the bounce buffer memory is never freed. This can lead to a denial of service, as enough bounce buffer memory leaks can cause the confidential VM to be unable to perform any I/O. The same problem can arise in non-confidential VMs with the kernel boot parameter swiotlb=force.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.