CVE - CVE-2022-49084

CVE-ID
CVE-2022-49084	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qede_build_skb() assumes build_skb() always works and goes straight to skb_reserve(). However, build_skb() can fail under memory pressure. This results in a kernel panic because the skb to reserve is NULL. Add a check in case build_skb() failed to allocate and return NULL. The NULL return is handled correctly in callers to qede_build_skb().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/034a92c6a81048128fc7b18d278d52438a13902a URL:https://git.kernel.org/stable/c/034a92c6a81048128fc7b18d278d52438a13902a MISC:https://git.kernel.org/stable/c/4e910dbe36508654a896d5735b318c0b88172570 URL:https://git.kernel.org/stable/c/4e910dbe36508654a896d5735b318c0b88172570 MISC:https://git.kernel.org/stable/c/8928239e5e2e460d95b8a0b89f61671625e7ece0 URL:https://git.kernel.org/stable/c/8928239e5e2e460d95b8a0b89f61671625e7ece0 MISC:https://git.kernel.org/stable/c/9648adb1b3ece55c657d3a4f52bfee663b710dfe URL:https://git.kernel.org/stable/c/9648adb1b3ece55c657d3a4f52bfee663b710dfe MISC:https://git.kernel.org/stable/c/b2d6b3db9d1cf80908964036dbe1c52a86b1afb1 URL:https://git.kernel.org/stable/c/b2d6b3db9d1cf80908964036dbe1c52a86b1afb1 MISC:https://git.kernel.org/stable/c/c9bdce2359b5f4986eb38d1e81865b3586cc20d2 URL:https://git.kernel.org/stable/c/c9bdce2359b5f4986eb38d1e81865b3586cc20d2 MISC:https://git.kernel.org/stable/c/e1fd0c42acfa22bb34d2ab6a111484f466ab8093 URL:https://git.kernel.org/stable/c/e1fd0c42acfa22bb34d2ab6a111484f466ab8093
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)