CVE-2022-49279

NFSD: prevent integer overflow on 32 bit systems

State: Published
Severity: 8.2 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

NFSD: prevent integer overflow on 32 bit systems

On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	37c88763def8474bc0972fbd1adb0d21670104b7 to before 3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8Affected 37c88763def8474bc0972fbd1adb0d21670104b7 to before ce1aa09cc14ed625104acc2d487bd92b9a88efe2Affected 37c88763def8474bc0972fbd1adb0d21670104b7 to before 7af164fa2f1abc577d357d22d83a2f3490875d7eAffected 37c88763def8474bc0972fbd1adb0d21670104b7 to before 303cd6173dce0a28d26526c77814eb90a41bd898Affected 37c88763def8474bc0972fbd1adb0d21670104b7 to before 79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3cAffected 37c88763def8474bc0972fbd1adb0d21670104b7 to before e4195d27306ea468a6dc3a27af6f586709951229Affected 37c88763def8474bc0972fbd1adb0d21670104b7 to before 23a9dbbe0faf124fc4c139615633b9d12a3a89efAffected
LinuxLinux	4.17Affected before 4.17Not affected 4.19.238 through 4.19.Not affected 5.4.189 through 5.4.Not affected 5.10.110 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

37c88763def8474bc0972fbd1adb0d21670104b7 to before 3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8Affected
37c88763def8474bc0972fbd1adb0d21670104b7 to before ce1aa09cc14ed625104acc2d487bd92b9a88efe2Affected
37c88763def8474bc0972fbd1adb0d21670104b7 to before 7af164fa2f1abc577d357d22d83a2f3490875d7eAffected
37c88763def8474bc0972fbd1adb0d21670104b7 to before 303cd6173dce0a28d26526c77814eb90a41bd898Affected
37c88763def8474bc0972fbd1adb0d21670104b7 to before 79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3cAffected
37c88763def8474bc0972fbd1adb0d21670104b7 to before e4195d27306ea468a6dc3a27af6f586709951229Affected
37c88763def8474bc0972fbd1adb0d21670104b7 to before 23a9dbbe0faf124fc4c139615633b9d12a3a89efAffected

LinuxLinux

4.17Affected
before 4.17Not affected
4.19.238 through 4.19.*Not affected
5.4.189 through 5.4.*Not affected
5.10.110 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.