CVE - CVE-2022-49030

CVE-ID
CVE-2022-49030	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, so 2 * max_entries will overflow u32 when mapping producer page and data pages. Only casting max_entries to size_t is not enough, because for 32-bits application on 64-bits kernel the size of read-only mmap region also could overflow size_t. So fixing it by casting the size of read-only mmap region into a __u64 and checking whether or not there will be overflow during mmap.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0140e079a42064680394fff1199a7b5483688dec URL:https://git.kernel.org/stable/c/0140e079a42064680394fff1199a7b5483688dec MISC:https://git.kernel.org/stable/c/535a25ab4f9a45f74ba38ab71de95e97474922ed URL:https://git.kernel.org/stable/c/535a25ab4f9a45f74ba38ab71de95e97474922ed MISC:https://git.kernel.org/stable/c/8a549ab6724520aa3c07f47e0eba820293551490 URL:https://git.kernel.org/stable/c/8a549ab6724520aa3c07f47e0eba820293551490 MISC:https://git.kernel.org/stable/c/927cbb478adf917e0a142b94baa37f06279cc466 URL:https://git.kernel.org/stable/c/927cbb478adf917e0a142b94baa37f06279cc466
Assigning CNA
kernel.org
Date Record Created
20240822	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240822)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)