CVE-2022-48841

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-48841
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48841.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48841
Downstream
Related
Published
2024-07-16T12:25:11Z
Modified
2025-10-08T06:27:38.307100Z
Summary
ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()
Details

In the Linux kernel, the following vulnerability has been resolved:

ice: fix NULL pointer dereference in iceupdatevsitxring_stats()

It is possible to do NULL pointer dereference in routine that updates Tx ring stats. Currently only stats and bytes are updated when ring pointer is valid, but later on ring is accessed to propagate gathered Tx stats onto VSI stats.

Change the existing logic to move to next ring when ring is NULL.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e72bba21355dbb67512a0d666fec9f4b56dbfc2f
Fixed
2397270ec97c5e3009a58ac110a25e1869e9d6ff
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e72bba21355dbb67512a0d666fec9f4b56dbfc2f
Fixed
f153546913bada41a811722f2c6d17c3243a0333

Affected versions

v5.*

v5.15
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.16.1
v5.16.10
v5.16.11
v5.16.12
v5.16.13
v5.16.14
v5.16.15
v5.16.16
v5.16.2
v5.16.3
v5.16.4
v5.16.5
v5.16.6
v5.16.7
v5.16.8
v5.16.9
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7

Database specific

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "224685324668643100144632098897998227127",
                    "9498866394697518921170359241428317676",
                    "173641765061114342003781831797756654659",
                    "322429391801460484922944668796814006151",
                    "248985636203913443190890724761400465706"
                ]
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f153546913bada41a811722f2c6d17c3243a0333",
            "deprecated": false,
            "target": {
                "file": "drivers/net/ethernet/intel/ice/ice_main.c"
            },
            "signature_type": "Line",
            "id": "CVE-2022-48841-07546d95"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 508.0,
                "function_hash": "280310342721941400327476159950942872798"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2397270ec97c5e3009a58ac110a25e1869e9d6ff",
            "deprecated": false,
            "target": {
                "file": "drivers/net/ethernet/intel/ice/ice_main.c",
                "function": "ice_update_vsi_tx_ring_stats"
            },
            "signature_type": "Function",
            "id": "CVE-2022-48841-28e62028"
        },
        {
            "signature_version": "v1",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "224685324668643100144632098897998227127",
                    "9498866394697518921170359241428317676",
                    "173641765061114342003781831797756654659",
                    "322429391801460484922944668796814006151",
                    "248985636203913443190890724761400465706"
                ]
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2397270ec97c5e3009a58ac110a25e1869e9d6ff",
            "deprecated": false,
            "target": {
                "file": "drivers/net/ethernet/intel/ice/ice_main.c"
            },
            "signature_type": "Line",
            "id": "CVE-2022-48841-2b4032bd"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 508.0,
                "function_hash": "280310342721941400327476159950942872798"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f153546913bada41a811722f2c6d17c3243a0333",
            "deprecated": false,
            "target": {
                "file": "drivers/net/ethernet/intel/ice/ice_main.c",
                "function": "ice_update_vsi_tx_ring_stats"
            },
            "signature_type": "Function",
            "id": "CVE-2022-48841-bf7061b7"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.16.17