CVE-2022-49096

Summary

CVE-2022-49096: A vulnerability in the Linux kernel's sfc driver has been addressed. The issue arises when the size of rx/tx ring buffers is changed, causing a kernel panic when acting as XDP_TX or XDP_REDIRECT. The root cause is the failure to reinitialize xdp queues after buffer size changes, leading to the use of uninitialized tx_queue->buffer for xdp operations. A new function, efx_set_xdp_channels(), has been introduced to specifically handle xdp queue reinitialization. The vulnerability results in a NULL pointer dereference, leading to a system crash.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.