CVE-2022-49280

CriticalCVSS 9.8

Published: 26/02/2025(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

48th percentile - higher than 48% of all known CVEs

Summary

In the Linux kernel, in the nfssvc_decode_writeargs() function in NFSD, an underflow issue with 'args->len' was fixed by changing the type to unsigned.

Risk Assessment

The underflow could lead to incorrect behavior of the NFS server, potentially allowing an attacker to cause unexpected behavior.

Recommendation

Install the updated Linux kernel with the fix for NFSD.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent underflow in nfssvc_decode_writeargs() Smatch complains: fs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs() warn: no lower bound on 'args->len' Change the type to unsigned to prevent this issue.