CVE-2022-48652

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix crash by keep old cfg when update TCs more than queues

There are problems if allocated queues less than Traffic Classes.

Commit a632b2a4c920 ("ice: ethtool: Prohibit improper channel config

for DCB") already disallow setting less queues than TCs.

Another case is if we first set less queues, and later update more TCs

config due to LLDP, ice_vsi_cfg_tc() will failed but left dirty

num_txq/rxq and tc_cfg in vsi, that will cause invalid pointer access.

[ 95.968089] ice 0000:3b:00.1: More TCs defined than queues/rings allocated.

[ 95.968092] ice 0000:3b:00.1: Trying to use more Rx queues (8), than were allocated (1)!

[ 95.968093] ice 0000:3b:00.1: Failed to config TC for VSI index: 0

[ 95.969621] general protection fault: 0000 [#1] SMP NOPTI

[ 95.969705] CPU: 1 PID: 58405 Comm: lldpad Kdump: loaded Tainted: G U W O --------- -t - 4.18.0 #1

[ 95.969867] Hardware name: O.E.M/BC11SPSCB10, BI

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References