Buffer Overflow in Linux Kernel Affecting NVMe Command Handling

CVE-2022-49720

Summary

A vulnerability exists in the Linux kernel's handling of offline queues, specifically in the blk_mq_alloc_request_hctx() function. This flaw can lead to an array index out-of-bounds error, which may occur when certain testing scenarios, such as nvme/004, are executed. Such conditions can cause improper memory access, potentially allowing attackers to exploit this situation and execute arbitrary code or trigger a denial of service.

References