Buffer Overflow in Linux Kernel Affecting NVMe Command Handling

CVE-2022-49720

What is CVE-2022-49720?

A vulnerability exists in the Linux kernel's handling of offline queues, specifically in the blk_mq_alloc_request_hctx() function. This flaw can lead to an array index out-of-bounds error, which may occur when certain testing scenarios, such as nvme/004, are executed. Such conditions can cause improper memory access, potentially allowing attackers to exploit this situation and execute arbitrary code or trigger a denial of service.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References