CVE-2022-49030
HIGHLinux Kernel 5.8-5.10.158 5.11-5.15.82 5.16-6.0.12 - Integer Overflow in Ring Buffer Mmap Size Calculation
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, so 2 * max_entries will overflow u32 when mapping producer page and data pages. Only casting max_entries to size_t is not enough, because for 32-bits application on 64-bits kernel the size of read-only mmap region also could overflow size_t. So fixing it by casting the size of read-only mmap region into a __u64 and checking whether or not there will be overflow during mmap.
References (4)
Core 4
Core References
Scores
CVSS v3
7.8
EPSS
0.0028
EPSS Percentile
19.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-190
Status
published
Products (15)
linux/Kernel
5.11.0 - 5.15.82linux
linux/Kernel
5.16.0 - 6.0.12linux
linux/Kernel
5.8.0 - 5.10.158linux
Linux/Linux
< 5.8
Linux/Linux
5.10.158 - 5.10.*
Linux/Linux
5.15.82 - 5.15.*
Linux/Linux
5.8
Linux/Linux
6.0.12 - 6.0.*
Linux/Linux
6.1
Linux/Linux
bf99c936f9478a05d51e9f101f90de70bee9a89c - 0140e079a42064680394fff1199a7b5483688dec
... and 5 more
Published
Oct 21, 2024
Tracked Since
Feb 18, 2026