SB20250502265 - Buffer overflow in Linux kernel net driver
Published: May 2, 2025 Updated: May 10, 2025
Security Bulletin ID
SB20250502265
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Buffer overflow (CVE-ID: CVE-2022-49776)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory corruption within the macvlan_common_setup() function in drivers/net/macvlan.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/2b055c719d8f94c15ec9b7659978133030c6a353
- https://git.kernel.org/stable/c/650137a7c0b2892df2e5b0bc112d7b09a78c93c8
- https://git.kernel.org/stable/c/a62aa84fe19eb24d083d600a074c009a0a66d4f3
- https://git.kernel.org/stable/c/b64085b00044bdf3cd1c9825e9ef5b2e0feae91a
- https://git.kernel.org/stable/c/d2fee7d121d189c6dc905b727d60e7043a6655bb
- https://git.kernel.org/stable/c/e41cbf98df22d08402e65174d147cbb187fe1a33
- https://git.kernel.org/stable/c/e929ec98c0c3b10d9c07f3776df0c1a02d7a763e
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.156