← CVE Intelligence

CVE-2022-49785

x86/sgx: Add overflow check in sgx_validate_offset_length() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgx_validate_offset_length() sgx_validate_offset_length() function verifies "offset" and "length" arguments provided by userspace, but was missing an overflow check on their addition. Add it.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected c6d26d370767fa227fc44b98a8bdad112efdf563 before 5277e3d633a5d4157987f4aff068caa55e36db19; affected c6d26d370767fa227fc44b98a8bdad112efdf563 before 3b1c10fb754b0b67165e3f055a4208e5ba26dc89; affected c6d26d370767fa227fc44b98a8bdad112efdf563 before f0861f49bd946ff94fce4f82509c45e167f63690
Linux / Linuxaffected 5.11; unaffected 0 before 5.11; unaffected 5.15.81 through 5.15.*; unaffected 6.0.10 through 6.0.*; unaffected 6.1 through *

CWE

No CWE identifiers supplied.

References