CVE-2022-49084

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49084
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49084.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49084
Downstream
Related
Published
2025-02-26T01:54:43.099Z
Modified
2026-04-11T12:43:31.657098Z
Summary
qede: confirm skb is allocated before using
Details

In the Linux kernel, the following vulnerability has been resolved:

qede: confirm skb is allocated before using

qedebuildskb() assumes buildskb() always works and goes straight to skbreserve(). However, build_skb() can fail under memory pressure. This results in a kernel panic because the skb to reserve is NULL.

Add a check in case build_skb() failed to allocate and return NULL.

The NULL return is handled correctly in callers to qedebuildskb().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49084.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a8633978b842c88fbcfe00d4e5dde96048f630e
Fixed
9648adb1b3ece55c657d3a4f52bfee663b710dfe
Fixed
034a92c6a81048128fc7b18d278d52438a13902a
Fixed
8928239e5e2e460d95b8a0b89f61671625e7ece0
Fixed
c9bdce2359b5f4986eb38d1e81865b3586cc20d2
Fixed
b2d6b3db9d1cf80908964036dbe1c52a86b1afb1
Fixed
e1fd0c42acfa22bb34d2ab6a111484f466ab8093
Fixed
4e910dbe36508654a896d5735b318c0b88172570

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49084.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.18.0
Fixed
4.19.238
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.189
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.111
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.34
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.16.20
Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
5.17.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49084.json"