Vulnerability details

CVE-2022-49356

Linux Linux

SUNRPC: Trap RDMA segment overflows

CVSS 3.1
9.8Critical

Official description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Caught with KASAN. The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.

CVSS scores

ScoreVersionSourceVector
9.8Critical 3.1 CVEProject cvelistV5 (CNA) (Linux) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Linux Linux 5.11 CVEProject cvelistV5 (CNA)
Linux Linux 7a1cbfa18059a40d4752dab057384c3ca2de326c ≤ v < ea26bf5eca1459b5a7824997d7823409ce38214e CVEProject cvelistV5 (CNA)
Linux Linux 7a1cbfa18059a40d4752dab057384c3ca2de326c ≤ v < 812c13521d4a72469c78ce06d8cdc8dc5b5557b5 CVEProject cvelistV5 (CNA)
Linux Linux 7a1cbfa18059a40d4752dab057384c3ca2de326c ≤ v < 659f7568e09593945c221bf20217a82ebdfe1328 CVEProject cvelistV5 (CNA)
Linux Linux 7a1cbfa18059a40d4752dab057384c3ca2de326c ≤ v < f012e95b377c73c0283f009823c633104dedb337 CVEProject cvelistV5 (CNA)

References and advisories

4
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-02-26
Last updated
2026-08-05
State
Published
Assigner (CNA)
Linux

Exploit prediction (EPSS)

0.67%
Probability of exploitation in 30 days
52.4%
Percentile (among all CVEs)

Weaknesses (CWE)

  • —