CVE-2022-49844

In the Linux kernel, the following vulnerability has been resolved:

can: dev: fix skb drop check

In commit a6d190f8c767 ("can: skb: drop tx skb if in listen only mode") the priv->ctrlmode element is read even on virtual CAN interfaces that do not create the struct can_priv at startup. This out-of-bounds read may lead to CAN frame drops for virtual CAN interfaces like vcan and vxcan.

This patch mainly reverts the original commit and adds a new helper for CAN interface drivers that provide the required information in struct can_priv.

[mkl: patch pch_can, too]

The patch addresses a flaw in the Marvell octeontx2-pf network driver where the calculation of available SQEs (Send Queue Entries) was incorrect. Instead of checking whether previous entries were fully processed, it relied on SQB hardware counters. This could result in a new SQE being submitted before the corresponding CQE was processed, leading to memory corruption or SKB pointer leaks. May cause memory leaks or data corruption under high load, particularly in NAPI-driven transmission paths.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.