QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-48949

Back to search

CVE-2022-48949

Published: Oct 21, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. The memory, however, is allocated from the stack meaning that information may be leaked to the VM. Initialize the message buffer to 0 so that no information is passed to the VM in this case.

VendorProductVersions

Linux

Linux

affected
6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 - < a6629659af3f5c6a91e3914ea62554c975ab77f4
affected
6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 - < ef1d739dd1f362aec081278ff92f943c31eb177a
affected
6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 - < c581439a977545d61849a72e8ed631cfc8a2a3c1
affected
6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 - < f2479c3daaabccbac6c343a737615d0c595c6dc4
affected
6ddbc4cf1f4d5a3a58b4223c80881f299dae3774 - < 367e1e3399dbc56fc669740c4ab60e35da632b0e

+3 more versions

Linux

Linux

affected
4.0
unaffected
0 - < 4.0
unaffected
4.14.303 - <= 4.14.*
unaffected
4.19.270 - <= 4.19.*
unaffected
5.4.229 - <= 5.4.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now