CVE-2022-49592

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: stmmac: fix dma queue left shift overflow issue

When queue number is > 4, left shift overflows due to 32 bits

integer variable. Mask calculation is wrong for MTL_RXQ_DMA_MAP1.

If CONFIG_UBSAN is enabled, kernel dumps below warning:

[ 10.363842] ==================================================================

[ 10.363882] UBSAN: shift-out-of-bounds in /build/linux-intel-iotg-5.15-8e6Tf4/

linux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c:224:12

[ 10.363929] shift exponent 40 is too large for 32-bit type 'unsigned int'

[ 10.363953] CPU: 1 PID: 599 Comm: NetworkManager Not tainted 5.15.0-1003-intel-iotg

[ 10.363956] Hardware name: ADLINK Technology Inc. LEC-EL/LEC-EL, BIOS 0.15.11 12/22/2021

[ 10.363958] Call Trace:

[ 10.363960] <TASK>

[ 10.363963] dump_stack_lvl+0x4a/0x5f

[ 10.363971] dump_stack+0x10/0x12

[ 10.363974] ubsan_epilogue+0x9/0x45

[ 10.363976] __

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References