https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:15:00 +0000 https://cve.radiocsirt.org/vuln/cve-2022-49134 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mlxsw: spectrum: Guard against invalid local ports</p> <p>When processing events generated by the device&#39;s firmware, the driver protects itself from events reported for non-existent local ports, but not for the CPU port (local port 0), which exists, but does not have all the fields as any local port.</p> <p>This can result in a NULL pointer dereference when trying access &#39;struct mlxsw_sp_port&#39; fields which are not initialized for CPU port.</p> <p>Commit 63b08b1f6834 (&#34;mlxsw: spectrum: Protect driver from buggy firmware&#34;) already handled such issue by bailing early when processing a PUDE event reported for the CPU port.</p> <p>Generalize the approach by moving the check to a common function and making use of it in all relevant places.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mlxsw: spectrum: Guard against invalid local ports</p> <p>When processing events generated by the device&#39;s firmware, the driver protects itself from events reported for non-existent local ports, but not for the CPU port (local port 0), which exists, but does not have all the fields as any local port.</p> <p>This can result in a NULL pointer dereference when trying access &#39;struct mlxsw_sp_port&#39; fields which are not initialized for CPU port.</p> <p>Commit 63b08b1f6834 (&#34;mlxsw: spectrum: Protect driver from buggy firmware&#34;) already handled such issue by bailing early when processing a PUDE event reported for the CPU port.</p> <p>Generalize the approach by moving the check to a common function and making use of it in all relevant places.</p> https://cve.radiocsirt.org/vuln/cve-2022-49134