CVE-2022-48932: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48932 affects the Linux kernel's Ethernet fsdr.c driver in the mlx5cmddrcreate_fte() function. The vulnerability was discovered in the Linux kernel versions from 5.16 up to (excluding) 5.16.12. The issue involves a slab-out-of-bounds vulnerability that occurs when adding a rule with 32 destinations (NVD, Kernel Patch).

The vulnerability occurs in the mlx5cmddrcreatefte() function when handling flow rules with multiple destinations. The issue arises because the allocated buffer size is insufficiently sized to contain all possible actions when dealing with flow rules that have 32 destinations plus additional actions. The CVSS v3.1 base score is 5.5 (Medium) with the vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD, Red Hat).

The vulnerability can lead to memory corruption or system instability when exploited. The out-of-bounds access occurs when the allocated buffer size is insufficient to contain all possible actions, potentially causing system crashes or memory corruption (Red Hat).

The issue has been fixed by increasing the allocated buffers to accommodate the needed actions and implementing checks for the number of actions to prevent the issue when a rule with too many actions is provided. The fix is available in the Linux kernel patch that increases MLX5FLOWCONTEXTACTIONMAX from 32 to 34 to account for additional actions (Kernel Patch).