CVE-2022-49279

Summary

In the Linux kernel, the following vulnerability has been resolved:

NFSD: prevent integer overflow on 32 bit systems

On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux37c88763def8474bc0972fbd1adb0d21670104b7 < 3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8affected
LinuxLinux37c88763def8474bc0972fbd1adb0d21670104b7 < ce1aa09cc14ed625104acc2d487bd92b9a88efe2affected
LinuxLinux37c88763def8474bc0972fbd1adb0d21670104b7 < 7af164fa2f1abc577d357d22d83a2f3490875d7eaffected
LinuxLinux37c88763def8474bc0972fbd1adb0d21670104b7 < 303cd6173dce0a28d26526c77814eb90a41bd898affected
LinuxLinux37c88763def8474bc0972fbd1adb0d21670104b7 < 79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3caffected
LinuxLinux37c88763def8474bc0972fbd1adb0d21670104b7 < e4195d27306ea468a6dc3a27af6f586709951229affected
LinuxLinux37c88763def8474bc0972fbd1adb0d21670104b7 < 23a9dbbe0faf124fc4c139615633b9d12a3a89efaffected
LinuxLinux4.17affected
LinuxLinux0 < 4.17unaffected
LinuxLinux4.19.238 <= 4.19.*unaffected
LinuxLinux5.4.189 <= 5.4.*unaffected
LinuxLinux5.10.110 <= 5.10.*unaffected
LinuxLinux5.15.33 <= 5.15.*unaffected
LinuxLinux5.16.19 <= 5.16.*unaffected
LinuxLinux5.17.2 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References