SecuritySpace - CVE-2022-2308

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2022-2308

Description: A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize the memory indirectly passed to vduse_vdpa_get_config() returning uninitialized memory from the stack. This could cause undefined behavior or data leaks in Virtio drivers.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-2308
https://bugzilla.redhat.com/show_bug.cgi?id=2103900
https://bugzilla.redhat.com/show_bug.cgi?id=2103900

CVE ID:	CVE-2022-2308
Description:	A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize the memory indirectly passed to vduse_vdpa_get_config() returning uninitialized memory from the stack. This could cause undefined behavior or data leaks in Virtio drivers.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-2308 https://bugzilla.redhat.com/show_bug.cgi?id=2103900 https://bugzilla.redhat.com/show_bug.cgi?id=2103900