First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | ||
Linux Kernel | <4.19.238 | |
Linux Kernel | >=4.20<5.4.189 | |
Linux Kernel | >=5.5<5.10.110 | |
Linux Kernel | >=5.11<5.15.33 | |
Linux Kernel | >=5.16<5.16.19 | |
Linux Kernel | >=5.17<5.17.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-49279 has been assessed as having a moderate severity level due to the potential for integer overflow on 32-bit systems.
To mitigate CVE-2022-49279, update your Linux kernel to a version that is equal to or greater than the fixed versions specified in the CVE details.
CVE-2022-49279 affects multiple Linux kernel versions between 4.20 and 5.17.2, along with older versions prior to 4.19.238.
The risks associated with CVE-2022-49279 include potential system crashes or exploitation leading to unauthorized access due to an integer overflow.
CVE-2022-49279 is specific to the Linux kernel itself and can affect any Linux distribution that uses the vulnerable kernel versions.