NetSight
medium5.5

CVE-2022-49785

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgx_validate_offset_length() sgx_validate_offset_length() fu…

Impact

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgx_validate_offset_length() sgx_validate_offset_length() function verifies "offset" and "length" arguments provided by userspace, but was missing an overflow check on their addition. Add it.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.11 before 5.15.81
from 5.16 before 6.0.10
Version 6.1

References