CVE-2022-49356

critical · 9.8

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Caught with KASAN. The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.

9.8

CVSS

0.7%

EPSS (exploit prob.)

50th

EPSS percentile

2025-02-26

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
linux	linux_kernel	>= 5.11, < 5.15.47
linux	linux_kernel	>= 5.16, < 5.17.15
linux	linux_kernel	>= 5.18, < 5.18.4
linux	linux_kernel	5.19

Check a specific version with /api/v1/cve/match.

References

https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328
https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5
https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e
https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-49356