CVE-2022-49720

Summary

CVE-2022-49720: A vulnerability in the Linux kernel's blk_mq_alloc_request_hctx() function has been addressed. This issue led to an out-of-bounds array access in block/blk-mq.h:135, specifically with an index that was 512 units beyond the array limit. The problem was triggered during the nvme_submit_sync_cmd function in the nvme_core module, and the call stack also included functions from the nvme_fabrics and vfs layers. This vulnerability could potentially result in a UBSAN error and could have serious consequences if exploited. The patch applied to this issue prevents such out-of-bounds accesses and mitigates the risk associated with this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.