CVE-2022-49208

RDMA/irdma: Prevent some integer underflows

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Prevent some integer underflows

My static checker complains that:

drivers/infiniband/hw/irdma/ctrl.c:3605 irdma_sc_ceq_init()

warn: can subtract underflow 'info->dev->hmc_fpm_misc.max_ceqs'?

It appears that "info->dev->hmc_fpm_misc.max_ceqs" comes from the firmware

in irdma_sc_parse_fpm_query_buf() so, yes, there is a chance that it could

be zero. Even if we trust the firmware, it's easy enough to change the

condition just as a hardenning measure.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Published
2025-02-26T01:55Z
EPSS history
Timeline
  • 26 FEB 01:55Z
    RDMA/irdma: Prevent some integer underflows
    cvelistv5