CVE-2022-49785
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
x86/sgx: Add overflow check in sgx_validate_offset_length()
sgx_validate_offset_length() function verifies "offset" and "length" arguments provided by userspace, but was missing an overflow check on their addition. Add it.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | c6d26d370767fa227fc44b98a8bdad112efdf563 < 5277e3d633a5d4157987f4aff068caa55e36db19 | affected |
| Linux | Linux | c6d26d370767fa227fc44b98a8bdad112efdf563 < 3b1c10fb754b0b67165e3f055a4208e5ba26dc89 | affected |
| Linux | Linux | c6d26d370767fa227fc44b98a8bdad112efdf563 < f0861f49bd946ff94fce4f82509c45e167f63690 | affected |
| Linux | Linux | 5.11 | affected |
| Linux | Linux | 0 < 5.11 | unaffected |
| Linux | Linux | 5.15.81 <= 5.15.* | unaffected |
| Linux | Linux | 6.0.10 <= 6.0.* | unaffected |
| Linux | Linux | 6.1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/5277e3d633a5d4157987f4aff068caa55e36db19
- https://git.kernel.org/stable/c/3b1c10fb754b0b67165e3f055a4208e5ba26dc89
- https://git.kernel.org/stable/c/f0861f49bd946ff94fce4f82509c45e167f63690
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.