CVE-2022-49356: SUNRPC: Trap RDMA segment overflows
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Trap RDMA segment overflows
Prevent svcrdmabuildwrites() from walking off the end of a Write chunk's segment array. Caught with KASAN.
The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49356?
CVE-2022-49356 is classified as a high severity vulnerability due to its potential to cause memory corruption in the Linux kernel.
How do I fix CVE-2022-49356?
To fix CVE-2022-49356, update your Linux kernel to a version that is patched, specifically versions above 5.15.47, 5.17.15, or 5.18.4.
Which versions of the Linux kernel are affected by CVE-2022-49356?
CVE-2022-49356 affects Linux kernel versions from 5.11 up to 5.15.47, from 5.16 up to 5.17.15, and from 5.18 up to 5.18.4.
What components of the Linux kernel are involved in CVE-2022-49356?
CVE-2022-49356 involves the SUNRPC subsystem and specifically affects the svc_rdma_build_writes() function.
What potential impact does CVE-2022-49356 have on systems?
The potential impact of CVE-2022-49356 includes system crashes and exploitation possibilities due to memory corruption.