NetSight
IP …
high7.5

CVE-2022-49084

In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qede_build_skb() assumes build_skb() always wor…

Impact

In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qede_build_skb() assumes build_skb() always works and goes straight to skb_reserve(). However, build_skb() can fail under memory pressure. This results in a kernel panic because the skb to reserve is NULL. Add a check in case build_skb() failed to allocate and return NULL. The NULL return is handled correctly in callers to qede_build_skb().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.18 before 4.19.238
from 4.20 before 5.4.189
from 5.5 before 5.10.111
from 5.11 before 5.15.34
from 5.16 before 5.16.20
from 5.17 before 5.17.3

Weakness classification

CWE-476

References