CVE-2022-48932

Summary

CVE-2022-48932 is a vulnerability found in the Linux kernel affecting multiple products, including various configurations of mlx5 drivers. The issue arises from a slab-out-of-bounds access when adding rules with excessive destinations, potentially leading to high availability impact. To remediate this vulnerability, users should apply the provided patches that increase allocated buffers and implement checks on action counts. The vulnerability has a medium severity rating, with an exploitability score of 1.8 and low privileges required for exploitation, making it critical for organizations using affected products to take corrective action promptly. Failure to address this vulnerability could expose systems to local attacks that may disrupt service availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.