CVE-2022-49280: NFSD: prevent underflow in nfssvc_decode_writeargs()
In the Linux kernel, the following vulnerability has been resolved:
NFSD: prevent underflow in nfssvcdecodewriteargs()
Smatch complains:
fs/nfsd/nfsxdr.c:341 nfssvcdecodewriteargs() warn: no lower bound on 'args->len'
Change the type to unsigned to prevent this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49280?
CVE-2022-49280 is considered a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2022-49280?
To fix CVE-2022-49280, update your Linux kernel to a version higher than 4.9.311 or apply the relevant patches provided by the Linux community.
What specific area of the Linux kernel is affected by CVE-2022-49280?
CVE-2022-49280 affects the NFSD (NFS daemon) code specifically in the function nfssvc_decode_writeargs().
Can CVE-2022-49280 lead to any security breaches?
While CVE-2022-49280 does not directly allow remote code execution, it can potentially lead to destabilization of services using NFS.
What Linux kernel versions are vulnerable to CVE-2022-49280?
Linux kernel versions prior to 4.9.311 and between 4.10 to 5.17.2 are vulnerable to CVE-2022-49280.