CVE-2022-2639

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

• linux linux kernel (>= 3.18.139 < 3.19) • linux linux kernel (>= 4.4.179 < 4.5) • linux linux kernel (>= 4.9.169 < 4.9.312) • linux linux kernel (>= 4.14.112 < 4.14.277) • linux linux kernel (>= 4.19.35 < 4.19.240) • linux linux kernel (>= 5.0.8 < 5.4.191) • linux linux kernel (>= 5.5 < 5.10.113) • linux linux kernel (>= 5.11 < 5.15.36) • linux linux kernel (>= 5.16 < 5.17.5) • redhat enterprise linux 8.0 • redhat enterprise linux 9.0