CVE-2022-49356

CVE-2022-49356

Critical · published February 26, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Trap RDMA segment overflows

Prevent svc_rdma_build_writes() from walking off the end of a Write

chunk's segment array. Caught with KASAN.

The test that this fix replaces is invalid, and might have been left

over from an earlier prototype of the PCL work.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00677 · 51.7th percentile
Published
2025-02-26T12:01Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.11, < 5.15.475.15.47
linux/linux_kernel≥ 5.16, < 5.17.155.17.15
linux/linux_kernel≥ 5.18, < 5.18.45.18.4
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 26 FEB 02:11Z
    SUNRPC: Trap RDMA segment overflows
    cvelistv5