CVE-2022-50717

In the Linux kernel, the following vulnerability has been resolved:

nvmet-tcp: add bounds check on Transfer Tag

ttag is used as an index to get cmd in nvmet_tcp_handle_h2c_data_pdu(), add a bounds check to avoid out-of-bounds access.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because the NVMe over Fabrics TCP target driver is not configured or loaded by default. Exploitation requires a host to be actively configured and running as an NVMe-oF target reachable over the network. Although an attacker with access to the NVMe-oF network can trigger an out-of-bounds access causing a kernel crash and denial of service, standard deployments that do not export NVMe storage over TCP remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.