CVE-2022-48900

kernel: xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

Published Aug 22, 2024 CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Weaknesses CWE-415
Type Values Removed Values Added
Title kernel: xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: xen/netfront: react properly to failing gnttab_end_foreign_access_ref() When calling gnttab_end_foreign_access_ref() the returned value must be tested and the reaction to that value should be appropriate. In case of failure in xennet_get_responses() the reaction should not be to crash the system, but to disable the network device. The calls in setup_netfront() can be replaced by calls of gnttab_end_foreign_access(). While at it avoid double free of ring pages and grant references via xennet_disconnect_backend() in this case. This is CVE-2022-23042 / part of XSA-396. --- V2: - avoid double free V3: - remove pointless initializer (Jan Beulich) This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: xen/netfront: react properly to failing gnttab_end_foreign_access_ref() When calling gnttab_end_foreign_access_ref() the returned value must be tested and the reaction to that value should be appropriate. In case of failure in xennet_get_responses() the reaction should not be to crash the system, but to disable the network device. The calls in setup_netfront() can be replaced by calls of gnttab_end_foreign_access(). While at it avoid double free of ring pages and grant references via xennet_disconnect_backend() in this case. This is CVE-2022-23042 / part of XSA-396. --- V2: - avoid double free V3: - remove pointless initializer (Jan Beulich)
Title xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
References

Subscriptions

No data.

Weaknesses

Sources

Status
REJECTED
Assigner
Linux
Published
Updated
Aug 22, 2024, 7:31 AM
Reserved
Aug 21, 2024, 6:06 AM
Status
Rejected
Published
Aug 22, 2024, 2:15 AM
Modified
Oct 18, 2026, 1:10 AM
Severity
Moderate
Public date
Aug 22, 2024, 12:00 AM