CVE-2022-49952

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49952
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on probe Add the missing sanity check on the probed-session count to avoid corrupting memory beyond the fixed-size slab-allocated session array when there are more than FASTRPC_MAX_SESSIONS sessions defined in the devicetree.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0e33b0f322fecd7a92d9dc186535cdf97940a856 Patch
https://git.kernel.org/stable/c/9baa1415d9abdd1e08362ea2dcfadfacee8690b5 Patch
https://git.kernel.org/stable/c/c0425c2facd9166fa083f90c9f3187ace0c7837a Patch
https://git.kernel.org/stable/c/c99bc901d5eb9fbdd7bd39f625e170ce97390336 Patch
https://git.kernel.org/stable/c/ec186b9f4aa2e6444d5308a6cc268aada7007639 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
History

14 Nov 2025, 18:58

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-787
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/0e33b0f322fecd7a92d9dc186535cdf97940a856 - () https://git.kernel.org/stable/c/0e33b0f322fecd7a92d9dc186535cdf97940a856 - Patch
References () https://git.kernel.org/stable/c/9baa1415d9abdd1e08362ea2dcfadfacee8690b5 - () https://git.kernel.org/stable/c/9baa1415d9abdd1e08362ea2dcfadfacee8690b5 - Patch
References () https://git.kernel.org/stable/c/c0425c2facd9166fa083f90c9f3187ace0c7837a - () https://git.kernel.org/stable/c/c0425c2facd9166fa083f90c9f3187ace0c7837a - Patch
References () https://git.kernel.org/stable/c/c99bc901d5eb9fbdd7bd39f625e170ce97390336 - () https://git.kernel.org/stable/c/c99bc901d5eb9fbdd7bd39f625e170ce97390336 - Patch
References () https://git.kernel.org/stable/c/ec186b9f4aa2e6444d5308a6cc268aada7007639 - () https://git.kernel.org/stable/c/ec186b9f4aa2e6444d5308a6cc268aada7007639 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: misc: fastrpc: corregir corrupción de memoria en la sonda Agregue la verificación de cordura faltante en el recuento de sesiones sondeadas para evitar corromper la memoria más allá de la matriz de sesiones asignadas por bloques de tamaño fijo cuando hay más de FASTRPC_MAX_SESSIONS sesiones definidas en el árbol de dispositivos.
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-14 18:58

NVD link : CVE-2022-49952

Mitre link : CVE-2022-49952

CVE.ORG link : CVE-2022-49952

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write