CVE-2022-49278

HIGH

Linux Kernel 5.9-5.10.110, 5.11-5.15.33, 5.16-5.16.19, 5.17-5.17.2 - Integer Underflow in rproc_coredump_write()

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check in rproc_coredump_write() Check count for 0, to avoid a potential underflow. Make the check the same as the one in rproc_recovery_write().

References (5)

Core 5

Core References

Patch

https://git.kernel.org/stable/c/b97b305656a7013690e7b6e310f0e827e0bbff90

Patch

https://git.kernel.org/stable/c/34afac3c75fa08d6fabbab4c93f0a90618afaaa6

Patch

https://git.kernel.org/stable/c/a8c3e53517985d69040a1b36a269e85f99cf0cea

Patch

https://git.kernel.org/stable/c/11572dad9fbadbd9269a2550f7e236b5b8c2d80c

Patch

https://git.kernel.org/stable/c/f89672cc3681952f2d06314981a6b45f8b0045d1

Scores

CVSS v3 7.1

EPSS 0.0025

EPSS Percentile 15.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Details

CWE

CWE-191

Status published

Products (17)

linux/Kernel 5.11.0 - 5.15.33linux

linux/Kernel 5.16.0 - 5.16.19linux

linux/Kernel 5.17.0 - 5.17.2linux

linux/Kernel 5.9.0 - 5.10.110linux

Linux/Linux < 5.9

Linux/Linux 3afdc59e4390487f04f2435b7e8a6289984e0a1e - 11572dad9fbadbd9269a2550f7e236b5b8c2d80c

Linux/Linux 3afdc59e4390487f04f2435b7e8a6289984e0a1e - 34afac3c75fa08d6fabbab4c93f0a90618afaaa6

Linux/Linux 3afdc59e4390487f04f2435b7e8a6289984e0a1e - a8c3e53517985d69040a1b36a269e85f99cf0cea

Linux/Linux 3afdc59e4390487f04f2435b7e8a6289984e0a1e - b97b305656a7013690e7b6e310f0e827e0bbff90

Linux/Linux 3afdc59e4390487f04f2435b7e8a6289984e0a1e - f89672cc3681952f2d06314981a6b45f8b0045d1

... and 7 more

Published Feb 26, 2025

Tracked Since Feb 18, 2026