CVE-2022-49356

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49356

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Caught with KASAN. The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.

References
Link Resource
https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328 Patch
https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5 Patch
https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e Patch
https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
History

21 Oct 2025, 12:17

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: SUNRPC: Trampa desbordamientos de segmentos RDMA Impide que svc_rdma_build_writes() se aleje del final de la matriz de segmentos de un fragmento de escritura. Detectado con KASAN. La prueba que esta corrección reemplaza no es válida y podría haber quedado de un prototipo anterior del trabajo de PCL.
References () https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328 - () https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328 - Patch
References () https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5 - () https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5 - Patch
References () https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e - () https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e - Patch
References () https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337 - () https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337 - Patch
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-21 12:17

NVD link : CVE-2022-49356

Mitre link : CVE-2022-49356

CVE.ORG link : CVE-2022-49356

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo