CVE-2022-49907

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49907
In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for __mdiobus_register Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in drivers/net/phy/mdio_bus.c:586:27 left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: <TASK> dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c __mdiobus_register+0x49d/0x4e0 fixed_mdio_bus_init+0xd8/0x12d do_one_initcall+0x76/0x430 kernel_init_freeable+0x3b3/0x422 kernel_init+0x24/0x1e0 ret_from_fork+0x1f/0x30 </TASK>

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/20ed01a7b9af6e6a3c33761eebbb710ea6dd49b7 Patch
https://git.kernel.org/stable/c/40e4eb324c59e11fcb927aa46742d28aba6ecb8a Patch
https://git.kernel.org/stable/c/4954b5359eb141499492fadfab891e28905509e2 Patch
https://git.kernel.org/stable/c/634f066d02bdb22a26da7deb0c7617ab1a65fc9d Patch
https://git.kernel.org/stable/c/6ce6f8f8f6316da6f92afe7490bc2f0b654d68e0 Patch
https://git.kernel.org/stable/c/7006176a3c863e3e353ce1b8a349ef5bb1b9320e Patch
https://git.kernel.org/stable/c/985a88bf0b27193522bba7856b1763f428cef19d Patch
https://git.kernel.org/stable/c/a3fafc974be37319679f36dc4e7cca7db1e02973 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
History

11 Nov 2025, 01:41

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/20ed01a7b9af6e6a3c33761eebbb710ea6dd49b7 - () https://git.kernel.org/stable/c/20ed01a7b9af6e6a3c33761eebbb710ea6dd49b7 - Patch
References () https://git.kernel.org/stable/c/40e4eb324c59e11fcb927aa46742d28aba6ecb8a - () https://git.kernel.org/stable/c/40e4eb324c59e11fcb927aa46742d28aba6ecb8a - Patch
References () https://git.kernel.org/stable/c/4954b5359eb141499492fadfab891e28905509e2 - () https://git.kernel.org/stable/c/4954b5359eb141499492fadfab891e28905509e2 - Patch
References () https://git.kernel.org/stable/c/634f066d02bdb22a26da7deb0c7617ab1a65fc9d - () https://git.kernel.org/stable/c/634f066d02bdb22a26da7deb0c7617ab1a65fc9d - Patch
References () https://git.kernel.org/stable/c/6ce6f8f8f6316da6f92afe7490bc2f0b654d68e0 - () https://git.kernel.org/stable/c/6ce6f8f8f6316da6f92afe7490bc2f0b654d68e0 - Patch
References () https://git.kernel.org/stable/c/7006176a3c863e3e353ce1b8a349ef5bb1b9320e - () https://git.kernel.org/stable/c/7006176a3c863e3e353ce1b8a349ef5bb1b9320e - Patch
References () https://git.kernel.org/stable/c/985a88bf0b27193522bba7856b1763f428cef19d - () https://git.kernel.org/stable/c/985a88bf0b27193522bba7856b1763f428cef19d - Patch
References () https://git.kernel.org/stable/c/a3fafc974be37319679f36dc4e7cca7db1e02973 - () https://git.kernel.org/stable/c/a3fafc974be37319679f36dc4e7cca7db1e02973 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

02 May 2025, 13:52

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: mdio: corrige comportamiento indefinido en el desplazamiento de bits para __mdiobus_register El desplazamiento de un valor de 32 bits con signo en 31 bits no está definido, por lo que se cambia el bit significativo a sin signo. El seguimiento de llamadas de advertencia de UBSAN como se muestra a continuación: UBSAN: desplazamiento fuera de los límites en drivers/net/phy/mdio_bus.c:586:27 El desplazamiento a la izquierda de 1 por 31 lugares no se puede representar en el tipo 'int' Seguimiento de llamadas: dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c __mdiobus_register+0x49d/0x4e0 fixed_mdio_bus_init+0xd8/0x12d do_one_initcall+0x76/0x430 kernel_init_freeable+0x3b3/0x422 kernel_init+0x24/0x1e0 ret_from_fork+0x1f/0x30

01 May 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 15:16

Updated : 2025-11-11 01:41

NVD link : CVE-2022-49907

Mitre link : CVE-2022-49907

CVE.ORG link : CVE-2022-49907

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo