CVE-2022-50877
Description
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908_enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NULL dereference. bcm4908_enet_start_xmit() could try to access skb after freeing it in the bcm4908_enet_poll_tx().
How to fix
- Linux Linuxc9589e18a60c55c76772a38117ef9a16b942e56b, 2adedc80faec243ede55355e57142110d6f46e08, ef3556ee16c68735ec69bd08df41d1cd83b14ad3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4feffeadbcb2e5b11cbbf191a33c245b74a5837b ≤ v < c9589e18a60c55c76772a38117ef9a16b942e56b, 4feffeadbcb2e5b11cbbf191a33c245b74a5837b ≤ v < 2adedc80faec243ede55355e57142110d6f46e08, 4feffeadbcb2e5b11cbbf191a33c245b74a5837b ≤ v < ef3556ee16c68735ec69bd08df41d1cd83b14ad3, 5.12 | c9589e18a60c55c76772a38117ef9a16b942e56b, 2adedc80faec243ede55355e57142110d6f46e08, ef3556ee16c68735ec69bd08df41d1cd83b14ad3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.