CVE-2022-49404

RDMA/hfi1: Fix potential integer multiplication overflow errors

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Fix potential integer multiplication overflow errors

When multiplying of different types, an overflow is possible even when storing the result in a larger type. This is because the conversion is done after the multiplication. So arithmetic overflow and thus in incorrect value is possible.

Correct an instance of this in the inter packet delay calculation. Fix by ensuring one of the operands is u64 which will promote the other to u64 as well ensuring no overflow.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	7724105686e718ac476a6ad3304fea2fbcfcffde to before 252f4afd4557a2e7075f793a5c80fe6dd9e9ee4aAffected 7724105686e718ac476a6ad3304fea2fbcfcffde to before a89cb7ddf6a89bab6012e19da38b7cdb26175c19Affected 7724105686e718ac476a6ad3304fea2fbcfcffde to before 79c164e61f818054cd6012e9035701840d895c51Affected 7724105686e718ac476a6ad3304fea2fbcfcffde to before 8858284dd74906fa00f04f0252c75df4893a7959Affected 7724105686e718ac476a6ad3304fea2fbcfcffde to before 31dca00d0cc9f4133320d72eb7e3720badc6d6e6Affected 7724105686e718ac476a6ad3304fea2fbcfcffde to before 3f09ec80f115d2875d747ed28adc1773037e0f8bAffected 7724105686e718ac476a6ad3304fea2fbcfcffde to before 06039d8afefdbac05bcea5f397188407eba2996dAffected 7724105686e718ac476a6ad3304fea2fbcfcffde to before ef5ab2e48a5f9960e2352332b7cdb7064bb49032Affected 7724105686e718ac476a6ad3304fea2fbcfcffde to before f93e91a0372c922c20d5bee260b0f43b4b8a1beeAffected
LinuxLinux	4.3Affected before 4.3Not affected 4.9.318 through 4.9.Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

7724105686e718ac476a6ad3304fea2fbcfcffde to before 252f4afd4557a2e7075f793a5c80fe6dd9e9ee4aAffected
7724105686e718ac476a6ad3304fea2fbcfcffde to before a89cb7ddf6a89bab6012e19da38b7cdb26175c19Affected
7724105686e718ac476a6ad3304fea2fbcfcffde to before 79c164e61f818054cd6012e9035701840d895c51Affected
7724105686e718ac476a6ad3304fea2fbcfcffde to before 8858284dd74906fa00f04f0252c75df4893a7959Affected
7724105686e718ac476a6ad3304fea2fbcfcffde to before 31dca00d0cc9f4133320d72eb7e3720badc6d6e6Affected
7724105686e718ac476a6ad3304fea2fbcfcffde to before 3f09ec80f115d2875d747ed28adc1773037e0f8bAffected
7724105686e718ac476a6ad3304fea2fbcfcffde to before 06039d8afefdbac05bcea5f397188407eba2996dAffected
7724105686e718ac476a6ad3304fea2fbcfcffde to before ef5ab2e48a5f9960e2352332b7cdb7064bb49032Affected
7724105686e718ac476a6ad3304fea2fbcfcffde to before f93e91a0372c922c20d5bee260b0f43b4b8a1beeAffected

LinuxLinux

4.3Affected
before 4.3Not affected
4.9.318 through 4.9.*Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.