Linux Kernel up to 5.18.3 mtk_hwlro_get_fdir_entry ethtool_get_rxnfc fsp->location out-of-bounds

Summaryinfo

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 5.18.3. This issue affects the function ethtool_get_rxnfc of the component mtk_hwlro_get_fdir_entry. Executing a manipulation of the argument fsp->location can lead to out-of-bounds. The identification of this vulnerability is CVE-2022-49368. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Linux Kernel up to 5.18.3 and classified as problematic. This vulnerability affects the function ethtool_get_rxnfc of the component mtk_hwlro_get_fdir_entry. The manipulation of the argument fsp->location with an unknown input leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() The "fsp->location" variable comes from user via ethtool_get_rxnfc(). Check that it is valid to prevent an out of bounds read.

The advisory is shared for download at git.kernel.org. This vulnerability was named CVE-2022-49368 since 02/26/2025. There are known technical details, but no exploit is available.

Upgrading to version 4.9.318, 4.14.283, 4.19.247, 5.4.198, 5.10.122, 5.15.47, 5.17.15 or 5.18.4 eliminates this vulnerability. Applying the patch b4f0e57ea0d867aacffad7999527e48bd4ea9293/5ba81f82607ead85fe36f50869fc4f5661359ab8/657e7174603f0aab2cdedc64ac81edffd2a87afe/2bd1faedb74dc2a2be3972abcd4239b75a3e7b00/71ae30662ec610b92644d13f79c78f76f17873b3/b24ca1cf846273361d5bd73a35de95a486a54b6d/4cde554c70d7397cfa2e4116bacb4accdfb6fd48/0b238f75b65ed4462ef4cdfa718cac0ac7fce3b8/e7e7104e2d5ddf3806a28695670f21bef471f1e1 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 4.9.317
• 4.14.282
• 4.19.246
• 5.4.197
• 5.10.121
• 5.15.0
• 5.15.1
• 5.15.2
• 5.15.3
• 5.15.4
• 5.15.5
• 5.15.6
• 5.15.7
• 5.15.8
• 5.15.9
• 5.15.10
• 5.15.11
• 5.15.12
• 5.15.13
• 5.15.14
• 5.15.15
• 5.15.16
• 5.15.17
• 5.15.18
• 5.15.19
• 5.15.20
• 5.15.21
• 5.15.22
• 5.15.23
• 5.15.24
• 5.15.25
• 5.15.26
• 5.15.27
• 5.15.28
• 5.15.29
• 5.15.30
• 5.15.31
• 5.15.32
• 5.15.33
• 5.15.34
• 5.15.35
• 5.15.36
• 5.15.37
• 5.15.38
• 5.15.39
• 5.15.40
• 5.15.41
• 5.15.42
• 5.15.43
• 5.15.44
• 5.15.45
• 5.15.46
• 5.17.0
• 5.17.1
• 5.17.2
• 5.17.3
• 5.17.4
• 5.17.5
• 5.17.6
• 5.17.7
• 5.17.8
• 5.17.9
• 5.17.10
• 5.17.11
• 5.17.12
• 5.17.13
• 5.17.14
• 5.18.0
• 5.18.1
• 5.18.2
• 5.18.3

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion