Memory Corruption in Virtual Function Driver of Linux Kernel

CVE-2022-49722

Summary

A vulnerability in the Linux kernel's Virtual Function (VF) driver was identified, which stems from improper handling of RX/TX queues. When a VF is disabled, it can still have its queues enabled during a reset request, leading to potential memory corruption. This issue may allow the device to erroneously map packets to memory, resulting in a state where memory corruption can occur, potentially causing instability and crashes in the kernel. The issue was addressed by ensuring that VF's RX/TX queues are properly disabled when the VF itself is disabled, thus preventing such scenarios.

References