PT-2022-7535

CVE-2022-48715

·

Published

2022-01-31

·

Updated

2024-12-04

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The vulnerability is related to the bnx2fc recv frame() function in the Linux kernel, which modifies the per cpu lport stats counters in a non-mpsafe way. This can lead to a bug when using smp processor id() in preemptible code. The issue can be reproduced by running tests with a debug kernel and enabling the bnx2fc driver with the hardware. The vulnerability may cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
OESA-2024-1793
OPENSUSE-SU-2024_2362-1
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
SUSE-SU-2024:2360-1
SUSE-SU-2024:2362-1
SUSE-SU-2024:2372-1
SUSE-SU-2024:2381-1
SUSE-SU-2024:2384-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2561-1
SUSE-SU-2024:2902-1
SUSE-SU-2024:2929-1
SUSE-SU-2024:2939-1
Found an issue in the description? Have something to add? Feel free to write us 👾