CVE-2022-49356

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49356
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Caught with KASAN. The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328 Patch
https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5 Patch
https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e Patch
https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
History

21 Oct 2025, 12:17

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: SUNRPC: Trampa desbordamientos de segmentos RDMA Impide que svc_rdma_build_writes() se aleje del final de la matriz de segmentos de un fragmento de escritura. Detectado con KASAN. La prueba que esta corrección reemplaza no es válida y podría haber quedado de un prototipo anterior del trabajo de PCL.
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328 - () https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328 - Patch
References () https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5 - () https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5 - Patch
References () https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e - () https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e - Patch
References () https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337 - () https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337 - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-21 12:17

NVD link : CVE-2022-49356

Mitre link : CVE-2022-49356

CVE.ORG link : CVE-2022-49356

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo