CVE-2022-49785

MEDIUM

Linux Kernel 5.11-5.15.81, 5.16-6.0.10 - Integer Overflow in SGX Offset/Length Validation

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgx_validate_offset_length() sgx_validate_offset_length() function verifies "offset" and "length" arguments provided by userspace, but was missing an overflow check on their addition. Add it.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/5277e3d633a5d4157987f4aff068caa55e36db19

Patch

https://git.kernel.org/stable/c/3b1c10fb754b0b67165e3f055a4208e5ba26dc89

Patch

https://git.kernel.org/stable/c/f0861f49bd946ff94fce4f82509c45e167f63690

Scores

CVSS v3 5.5

EPSS 0.0019

EPSS Percentile 8.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (12)

linux/Kernel 5.11.0 - 5.15.81linux

linux/Kernel 5.16.0 - 6.0.10linux

Linux/Linux < 5.11

Linux/Linux 5.11

Linux/Linux 5.15.81 - 5.15.*

Linux/Linux 6.0.10 - 6.0.*

Linux/Linux 6.1

Linux/Linux c6d26d370767fa227fc44b98a8bdad112efdf563 - 3b1c10fb754b0b67165e3f055a4208e5ba26dc89

Linux/Linux c6d26d370767fa227fc44b98a8bdad112efdf563 - 5277e3d633a5d4157987f4aff068caa55e36db19

Linux/Linux c6d26d370767fa227fc44b98a8bdad112efdf563 - f0861f49bd946ff94fce4f82509c45e167f63690

... and 2 more

Published May 01, 2025

Tracked Since Feb 18, 2026