CVE-2022-49950

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49950
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on open The probe session-duplication overflow check incremented the session count also when there were no more available sessions so that memory beyond the fixed-size slab-allocated session array could be corrupted in fastrpc_session_alloc() on open().

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5cf2a57c7a01a0d7bdecf875a63682f542891b1b Patch
https://git.kernel.org/stable/c/cf20c3533efc89578ace94fa20a9e63446223c72 Patch
https://git.kernel.org/stable/c/d245f43aab2b61195d8ebb64cef7b5a08c590ab4 Patch
https://git.kernel.org/stable/c/e0578e603065f120a8759b75e0d6c216c7078a39 Patch
https://git.kernel.org/stable/c/f8632b8bb53ebc005d8f24a68a0c1f9678c0e908 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
History

14 Nov 2025, 18:58

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: misc: fastrpc: corrige corrupción de memoria al abrir La comprobación de desbordamiento de duplicación de sesión de la sonda incrementó el recuento de sesiones también cuando no había más sesiones disponibles, de modo que la memoria más allá de la matriz de sesiones asignadas en bloques de tamaño fijo podía corromperse en fastrpc_session_alloc() al abrir().
References () https://git.kernel.org/stable/c/5cf2a57c7a01a0d7bdecf875a63682f542891b1b - () https://git.kernel.org/stable/c/5cf2a57c7a01a0d7bdecf875a63682f542891b1b - Patch
References () https://git.kernel.org/stable/c/cf20c3533efc89578ace94fa20a9e63446223c72 - () https://git.kernel.org/stable/c/cf20c3533efc89578ace94fa20a9e63446223c72 - Patch
References () https://git.kernel.org/stable/c/d245f43aab2b61195d8ebb64cef7b5a08c590ab4 - () https://git.kernel.org/stable/c/d245f43aab2b61195d8ebb64cef7b5a08c590ab4 - Patch
References () https://git.kernel.org/stable/c/e0578e603065f120a8759b75e0d6c216c7078a39 - () https://git.kernel.org/stable/c/e0578e603065f120a8759b75e0d6c216c7078a39 - Patch
References () https://git.kernel.org/stable/c/f8632b8bb53ebc005d8f24a68a0c1f9678c0e908 - () https://git.kernel.org/stable/c/f8632b8bb53ebc005d8f24a68a0c1f9678c0e908 - Patch
CWE CWE-787
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-14 18:58

NVD link : CVE-2022-49950

Mitre link : CVE-2022-49950

CVE.ORG link : CVE-2022-49950

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write