CVE-2022-49356

CriticalCVSS 9.8

Published: 26/02/2025(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.65%

48th percentile - higher than 48% of all known CVEs

Summary

In the Linux kernel, in the svc_rdma_build_writes() function in SUNRPC, an overflow issue with RDMA segments was fixed by preventing walking off the end of the segment array.

Risk Assessment

The buffer overflow could lead to system crashes or potentially remote code execution in environments using RDMA.

Recommendation

Install the updated Linux kernel with the fix for SUNRPC.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Caught with KASAN. The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.