CVE-2022-49368

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resolved issue in the Linux kernel involves an out of bounds read in the mtk hwlro get fdir entry() function. The fsp->location variable, which comes from the user via the ethtool get rxnfc() function, is not properly validated, leading to a potential out of bounds read. This issue can be mitigated by checking the validity of the fsp->location variable to prevent such reads.

Recommendations For the Linux kernel, ensure that the fsp->location variable is validated to prevent out of bounds reads in the mtk hwlro get fdir entry() function. As a temporary workaround, consider adding input validation for the ethtool get rxnfc() function to restrict potentially malicious user input.