CVE-2022-49404

RDMA/hfi1: Fix potential integer multiplication overflow errors

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
18.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Fix potential integer multiplication overflow errors

When multiplying of different types, an overflow is possible even when

storing the result in a larger type. This is because the conversion is

done after the multiplication. So arithmetic overflow and thus in

incorrect value is possible.

Correct an instance of this in the inter packet delay calculation. Fix by

ensuring one of the operands is u64 which will promote the other to u64 as

well ensuring no overflow.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00276 · 18.9th percentile
Published
2025-02-26T02:12Z
EPSS history
Timeline
  • 26 FEB 02:12Z
    RDMA/hfi1: Fix potential integer multiplication overflow errors
    cvelistv5