CVE-2022-48882: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48882 is a vulnerability in the Linux kernel affecting the MACsec (MAC Security) functionality in the Mellanox MLX5 driver. The vulnerability was discovered in the net/mlx5e component and involves a potential null pointer dereference when updating MAC security entity (SecY). This issue affects Linux kernel versions from 6.1 up to (excluding) 6.1.7 (NVD).

The vulnerability occurs in the hardware offload path when updating a MAC security entity (SecY). Specifically, when the extended packet number (EPN) is enabled, the salt and SSCI attributes are retrieved using the MACsec driver rx_sa context. However, this context is unavailable when updating a SecY property such as encoding-sa, leading to a null pointer dereference. The issue has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability primarily affects system availability. When successfully exploited, it can cause a null pointer dereference in the kernel, potentially leading to system crashes or denial of service conditions. The CVSS scoring indicates no impact on confidentiality or integrity, but a high impact on availability (NVD).

The vulnerability requires local access with low privileges and no user interaction for exploitation. The attack complexity is considered low, indicating that the vulnerability is relatively straightforward to exploit under the right conditions (NVD).

The vulnerability has been fixed by modifying the code to use the provided SA to set the salt and SSCI attributes instead of relying on the rx_sa context. The fix is implemented in the kernel patch that changes the attribute retrieval method in the mlx5e_macsec_init_sa function (Kernel Patch).