CVE-2022-49289
published 2025-02-26CVE-2022-49289: In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on access_ok() Three architectures check the end of a user…
PriorityP430high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.26%
18.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
uaccess: fix integer overflow on access_ok()
Three architectures check the end of a user access against the
address limit without taking a possible overflow into account.
Passing a negative length or another overflow in here returns
success when it should not.
Use the most common correct implementation here, which optimizes
for a constant 'size' argument, and turns the common case into a
single comparison.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.18-1 (bookworm) | linux 5.16.18-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7567746e1c0d66ac0ef8a9d8816ca694462c7370 < e65d28d4e9bf90a35ba79c06661a572a38391dec | e65d28d4e9bf90a35ba79c06661a572a38391dec |
| linux | linux | >= 7567746e1c0d66ac0ef8a9d8816ca694462c7370 < 99801e2f457824955da4aadaa035913a6dede03a | 99801e2f457824955da4aadaa035913a6dede03a |
| linux | linux | >= 7567746e1c0d66ac0ef8a9d8816ca694462c7370 < a1ad747fc1a0e06d1bf26b996ee8a56b5c8d02d8 | a1ad747fc1a0e06d1bf26b996ee8a56b5c8d02d8 |
| linux | linux | >= 7567746e1c0d66ac0ef8a9d8816ca694462c7370 < 222ca305c9fd39e5ed8104da25c09b2b79a516a8 | 222ca305c9fd39e5ed8104da25c09b2b79a516a8 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 3.2 < 5.15.32 | 5.15.32 |
| linux | linux_kernel | >= 5.16 < 5.16.18 | 5.16.18 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: uaccess: fix integer overflow on access_ok()
vendor_redhat·2025-02-26·CVSS 7.1
CVE-2022-49289 [HIGH] kernel: uaccess: fix integer overflow on access_ok()
kernel: uaccess: fix integer overflow on access_ok()
In the Linux kernel, the following vulnerability has been resolved:
uaccess: fix integer overflow on access_ok()
Three architectures check the end of a user access against the
address limit without taking a possible overflow into account.
Passing a negative length or another overflow in here returns
success when it should not.
Use the most common correct implementation here, which optimizes
for a constant 'size' argument, and turns the common case into a
single comparison.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Re
Debian
CVE-2022-49289: linux - In the Linux kernel, the following vulnerability has been resolved: uaccess: fi...
vendor_debian·2022·CVSS 7.1
CVE-2022-49289 [HIGH] CVE-2022-49289: linux - In the Linux kernel, the following vulnerability has been resolved: uaccess: fi...
In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on access_ok() Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns success when it should not. Use the most common correct implementation here, which optimizes for a constant 'size' argument, and turns the common case into a single comparison.
Scope: local
bookworm: resolved (fixed in 5.16.18-1)
bullseye: open
forky: resolved (fixed in 5.16.18-1)
sid: resolved (fixed in 5.16.18-1)
trixie: resolved (fixed in 5.16.18-1)
GHSA
GHSA-vfhm-mc4c-75c8: In the Linux kernel, the following vulnerability has been resolved:
uaccess: fix integer overflow on access_ok()
Three architectures check the end o
ghsa_unreviewed·2025-09-22
CVE-2022-49289 [HIGH] CWE-190 GHSA-vfhm-mc4c-75c8: In the Linux kernel, the following vulnerability has been resolved:
uaccess: fix integer overflow on access_ok()
Three architectures check the end o
In the Linux kernel, the following vulnerability has been resolved:
uaccess: fix integer overflow on access_ok()
Three architectures check the end of a user access against the
address limit without taking a possible overflow into account.
Passing a negative length or another overflow in here returns
success when it should not.
Use the most common correct implementation here, which optimizes
for a constant 'size' argument, and turns the common case into a
single comparison.
OSV
CVE-2022-49289: In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on access_ok() Three architectures check the end of
osv·2025-02-26·CVSS 7.1
CVE-2022-49289 [HIGH] CVE-2022-49289: In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on access_ok() Three architectures check the end of
In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on access_ok() Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns success when it should not. Use the most common correct implementation here, which optimizes for a constant 'size' argument, and turns the common case into a single comparison.
No detection rules found.
No public exploits indexed.
2025-02-26
Published