CVE-2022-49199
published 2025-02-26CVE-2022-49199: In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code checks…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
This code checks "index" for an upper bound but it does not check for
negatives. Change the type to unsigned to prevent underflows.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3c3c1f1416392382faa0238e76a70d7810aab2ef < f6dd8669b8299a3a536cd92a7069152a7704da1d | f6dd8669b8299a3a536cd92a7069152a7704da1d |
| linux | linux | >= 3c3c1f1416392382faa0238e76a70d7810aab2ef < 2a495ef04d5f42e6f00eb2bec1ee9075e3d5a771 | 2a495ef04d5f42e6f00eb2bec1ee9075e3d5a771 |
| linux | linux | >= 3c3c1f1416392382faa0238e76a70d7810aab2ef < 87e0eacb176f9500c2063d140c0a1d7fa51ab8a5 | 87e0eacb176f9500c2063d140c0a1d7fa51ab8a5 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 5.16 < 5.16.19 | 5.16.19 |
| linux | linux_kernel | >= 5.17 < 5.17.2 | 5.17.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49199 [MEDIUM] CWE-191 kernel: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
kernel: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
This code checks "index" for an upper bound but it does not check for
negatives. Change the type to unsigned to prevent underflows.
Statement: The bug could happen only if RDMA being used (that is Remote Direct Memory Access). The security impact is limited, because it is integer underflow bug that does not lead to an actual kernel panic or other fail. It can lead to incorrect behavior of RDMA (for example to incorrect statistics counters value or similar).
Mitigation: To mitigate this issue, prevent module ib_core from being loaded. Please see https://access.redhat.com/so
Debian
CVE-2022-49199: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev:...
vendor_debian·2022·CVSS 5.5
CVE-2022-49199 [MEDIUM] CVE-2022-49199: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev:...
In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code checks "index" for an upper bound but it does not check for negatives. Change the type to unsigned to prevent underflows.
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: resolved
forky: resolved (fixed in 5.17.3-1)
sid: resolved (fixed in 5.17.3-1)
trixie: resolved (fixed in 5.17.3-1)
GHSA
GHSA-4gx4-w2xq-pwmj: In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
This code
ghsa_unreviewed·2025-10-21
CVE-2022-49199 [MEDIUM] CWE-191 GHSA-4gx4-w2xq-pwmj: In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
This code
In the Linux kernel, the following vulnerability has been resolved:
RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
This code checks "index" for an upper bound but it does not check for
negatives. Change the type to unsigned to prevent underflows.
OSV
CVE-2022-49199: In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code c
osv·2025-02-26·CVSS 5.5
CVE-2022-49199 [MEDIUM] CVE-2022-49199: In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code c
In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code checks "index" for an upper bound but it does not check for negatives. Change the type to unsigned to prevent underflows.
No detection rules found.
No public exploits indexed.
2025-02-26
Published