CVE-2022-49208

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49208
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent some integer underflows My static checker complains that: drivers/infiniband/hw/irdma/ctrl.c:3605 irdma_sc_ceq_init() warn: can subtract underflow 'info->dev->hmc_fpm_misc.max_ceqs'? It appears that "info->dev->hmc_fpm_misc.max_ceqs" comes from the firmware in irdma_sc_parse_fpm_query_buf() so, yes, there is a chance that it could be zero. Even if we trust the firmware, it's easy enough to change the condition just as a hardenning measure.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6f6dbb819dfc1a35bcb8b709b5c83a3ea8beff75 Patch
https://git.kernel.org/stable/c/7340c3675d7ac946f4019b84cd7c64ed542dfe4c Patch
https://git.kernel.org/stable/c/d52dab6e03550f9c97121b0c11c0a3ed78ee76a4 Patch
https://git.kernel.org/stable/c/f21056f15bbeacab7b4b87af232f5599d1f2bff1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 20:11

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/6f6dbb819dfc1a35bcb8b709b5c83a3ea8beff75 - () https://git.kernel.org/stable/c/6f6dbb819dfc1a35bcb8b709b5c83a3ea8beff75 - Patch
References () https://git.kernel.org/stable/c/7340c3675d7ac946f4019b84cd7c64ed542dfe4c - () https://git.kernel.org/stable/c/7340c3675d7ac946f4019b84cd7c64ed542dfe4c - Patch
References () https://git.kernel.org/stable/c/d52dab6e03550f9c97121b0c11c0a3ed78ee76a4 - () https://git.kernel.org/stable/c/d52dab6e03550f9c97121b0c11c0a3ed78ee76a4 - Patch
References () https://git.kernel.org/stable/c/f21056f15bbeacab7b4b87af232f5599d1f2bff1 - () https://git.kernel.org/stable/c/f21056f15bbeacab7b4b87af232f5599d1f2bff1 - Patch
CWE CWE-191
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/irdma: Evitar algunos desbordamientos de enteros Mi verificador estático se queja de que: drivers/infiniband/hw/irdma/ctrl.c:3605 irdma_sc_ceq_init() warn: can subtract underflow 'info->dev->hmc_fpm_misc.max_ceqs'? Parece que "info->dev->hmc_fpm_misc.max_ceqs" proviene del firmware en irdma_sc_parse_fpm_query_buf() así que, sí, existe la posibilidad de que sea cero. Incluso si confiamos en el firmware, es bastante fácil cambiar la condición como una medida de endurecimiento.

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-18 20:11

NVD link : CVE-2022-49208

Mitre link : CVE-2022-49208

CVE.ORG link : CVE-2022-49208

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)