CVE-2022-48938

CDC-NCM: avoid overflow in sanity checking

State: Published
Severity: Not scored
Published: Aug 22, 2024
Updated: May 23, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4ca8b8855264cf1439cdab3da7049bd1e3c2a9e6 to before a612395c7631918e0e10ea48b9ce5ab4340f26a6Affected a270ca35a9499b58366d696d3290eaa4697a42db to before 9957fbf34f52a4d8945d1bf39aae400ef9a11246Affected 0fa81b304a7973a499f844176ca031109487dd31 to before 69560efa001397ebb8dc1c3e6a3ce00302bb9f7fAffected 0fa81b304a7973a499f844176ca031109487dd31 to before 49909c9f8458cacb5b241106cba65aba5a6d8f4cAffected 0fa81b304a7973a499f844176ca031109487dd31 to before 7b737e47b87589031f0d4657f6d7b0b770474925Affected 0fa81b304a7973a499f844176ca031109487dd31 to before 8d2b1a1ec9f559d30b724877da4ce592edc41fdcAffected 8cf7db86a8984ffa3a3388a8df12bc0aa4c79bd7Affected 4.19.285 to before 4.19.323Affected 5.4.245 to before 5.4.285Affected 4.14.317 to before 4.15Affected
LinuxLinux	5.7Affected before 5.7Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.103 through 5.10.Not affected 5.15.26 through 5.15.Not affected 5.16.12 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

4ca8b8855264cf1439cdab3da7049bd1e3c2a9e6 to before a612395c7631918e0e10ea48b9ce5ab4340f26a6Affected
a270ca35a9499b58366d696d3290eaa4697a42db to before 9957fbf34f52a4d8945d1bf39aae400ef9a11246Affected
0fa81b304a7973a499f844176ca031109487dd31 to before 69560efa001397ebb8dc1c3e6a3ce00302bb9f7fAffected
0fa81b304a7973a499f844176ca031109487dd31 to before 49909c9f8458cacb5b241106cba65aba5a6d8f4cAffected
0fa81b304a7973a499f844176ca031109487dd31 to before 7b737e47b87589031f0d4657f6d7b0b770474925Affected
0fa81b304a7973a499f844176ca031109487dd31 to before 8d2b1a1ec9f559d30b724877da4ce592edc41fdcAffected
8cf7db86a8984ffa3a3388a8df12bc0aa4c79bd7Affected
4.19.285 to before 4.19.323Affected
5.4.245 to before 5.4.285Affected
4.14.317 to before 4.15Affected

LinuxLinux

5.7Affected
before 5.7Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.103 through 5.10.*Not affected
5.15.26 through 5.15.*Not affected
5.16.12 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.