CVE-2022-49279

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49279
In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/23a9dbbe0faf124fc4c139615633b9d12a3a89ef Patch
https://git.kernel.org/stable/c/303cd6173dce0a28d26526c77814eb90a41bd898 Patch
https://git.kernel.org/stable/c/3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8 Patch
https://git.kernel.org/stable/c/79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3c Patch
https://git.kernel.org/stable/c/7af164fa2f1abc577d357d22d83a2f3490875d7e Patch
https://git.kernel.org/stable/c/ce1aa09cc14ed625104acc2d487bd92b9a88efe2 Patch
https://git.kernel.org/stable/c/e4195d27306ea468a6dc3a27af6f586709951229 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Apr 2025, 20:06

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/23a9dbbe0faf124fc4c139615633b9d12a3a89ef - () https://git.kernel.org/stable/c/23a9dbbe0faf124fc4c139615633b9d12a3a89ef - Patch
References () https://git.kernel.org/stable/c/303cd6173dce0a28d26526c77814eb90a41bd898 - () https://git.kernel.org/stable/c/303cd6173dce0a28d26526c77814eb90a41bd898 - Patch
References () https://git.kernel.org/stable/c/3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8 - () https://git.kernel.org/stable/c/3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8 - Patch
References () https://git.kernel.org/stable/c/79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3c - () https://git.kernel.org/stable/c/79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3c - Patch
References () https://git.kernel.org/stable/c/7af164fa2f1abc577d357d22d83a2f3490875d7e - () https://git.kernel.org/stable/c/7af164fa2f1abc577d357d22d83a2f3490875d7e - Patch
References () https://git.kernel.org/stable/c/ce1aa09cc14ed625104acc2d487bd92b9a88efe2 - () https://git.kernel.org/stable/c/ce1aa09cc14ed625104acc2d487bd92b9a88efe2 - Patch
References () https://git.kernel.org/stable/c/e4195d27306ea468a6dc3a27af6f586709951229 - () https://git.kernel.org/stable/c/e4195d27306ea468a6dc3a27af6f586709951229 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFSD: evitar el desbordamiento de enteros en sistemas de 32 bits. En un sistema de 32 bits, la operación "len * sizeof(*p)" puede tener un desbordamiento de enteros.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-190
First Time Linux linux Kernel
Linux

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-04-14 20:06

NVD link : CVE-2022-49279

Mitre link : CVE-2022-49279

CVE.ORG link : CVE-2022-49279

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-190

Integer Overflow or Wraparound