CVE-2022-49368 - CERT CVE
ID CVE-2022-49368
Sažetak In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() The "fsp->location" variable comes from user via ethtool_get_rxnfc(). Check that it is valid to prevent an out of bounds read.
Reference
CVSS
Base: 7.1
Impact: 5.2
Exploitability:1.8
Pristup
VektorSloženostAutentikacija
LOCAL LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH NONE HIGH
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Zadnje važnije ažuriranje 14-04-2025 - 20:42
Objavljeno 26-02-2025 - 07:01