CVE-2022-48807

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to errors in reading beyond the allocated buffer memory in the ice component of the Linux kernel. This can cause a denial of service. The problem occurs because the same handler is called for both a NETDEV BONDING INFO LAG unlink notification and a NETDEV UNREGISTER call, resulting in a KASAN stack-out-of-bounds error due to the different structure of the netdev notifier info passed depending on the event.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.