How severe is CVE-2022-48932?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.5 out of 10.

What type of vulnerability is CVE-2022-48932?

This is classified as CWE-125, which is a common weakness in software security.

CVE-2022-48932 - MEDIUM Severity | CVSS 5.5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.

Related Vulnerabilities

CVE-2006-5393

MEDIUM

CVSS:5.5(Medium)

Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written...

CWE-1252006

CVE-2014-8355

MEDIUM

CVSS:5.5(Medium)

PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).

CWE-1252014

CVE-2014-8562

MEDIUM

CVSS:5.5(Medium)

DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).

CWE-1252014

CVE-2014-9816

MEDIUM

CVSS:5.5(Medium)

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.

CWE-1252014

CVE-2014-9818

MEDIUM

CVSS:5.5(Medium)

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.

CWE-1252014

CVE-2014-9844

MEDIUM

CVSS:5.5(Medium)

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.

CWE-1252014