In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/23a9dbbe0faf124fc4c139615633b9d12a3a89ef cve-icon cve-icon
https://git.kernel.org/stable/c/303cd6173dce0a28d26526c77814eb90a41bd898 cve-icon cve-icon
https://git.kernel.org/stable/c/3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8 cve-icon cve-icon
https://git.kernel.org/stable/c/79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3c cve-icon cve-icon
https://git.kernel.org/stable/c/7af164fa2f1abc577d357d22d83a2f3490875d7e cve-icon cve-icon
https://git.kernel.org/stable/c/ce1aa09cc14ed625104acc2d487bd92b9a88efe2 cve-icon cve-icon
https://git.kernel.org/stable/c/e4195d27306ea468a6dc3a27af6f586709951229 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022631-CVE-2022-49279-811f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49279 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49279 cve-icon
History

Thu, 02 Oct 2025 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 14 Apr 2025 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-190
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.
Title NFSD: prevent integer overflow on 32 bit systems
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T01:56:22.051Z

Updated: 2025-10-01T19:47:01.079Z

Reserved: 2025-02-26T01:49:39.298Z

Link: CVE-2022-49279

cve-icon Vulnrichment

Updated: 2025-10-01T16:12:16.122Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:01:04.750

Modified: 2025-10-01T20:16:00.770

Link: CVE-2022-49279

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49279 - Bugzilla