CVE-2022-49748
published 2025-03-27CVE-2022-49748: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
8.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/amd: fix potential integer overflow on shift of a int
The left shift of int 32 bit integer constant 1 is evaluated using 32 bit
arithmetic and then passed as a 64 bit function argument. In the case where
i is 32 or more this can lead to an overflow. Avoid this by shifting
using the BIT_ULL macro instead.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.11-1 (bookworm) | linux 6.1.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 471af006a747f1c535c8a8c6c0973c320fe01b22 < f84c9b72fb200633774704d8020f769c88a4b249 | f84c9b72fb200633774704d8020f769c88a4b249 |
| linux | linux | >= 471af006a747f1c535c8a8c6c0973c320fe01b22 < 14cc13e433e1067557435b1adbf05608d7d47a93 | 14cc13e433e1067557435b1adbf05608d7d47a93 |
| linux | linux | >= 471af006a747f1c535c8a8c6c0973c320fe01b22 < a4d01fb87ece45d4164fd725890211ccf9a307a9 | a4d01fb87ece45d4164fd725890211ccf9a307a9 |
| linux | linux | >= 471af006a747f1c535c8a8c6c0973c320fe01b22 < 08245672cdc6505550d1a5020603b0a8d4a6dcc7 | 08245672cdc6505550d1a5020603b0a8d4a6dcc7 |
| linux | linux | >= 5.4.22 < 5.4.231 | 5.4.231 |
| linux | linux | >= 5.5.6 < 5.6 | 5.6 |
| linux | linux | >= d8a6a443ff0aea5893f0a7f2726973b496b76420 < fbf7b0e4cef3b5470b610f14fb9faa5ee7f63954 | fbf7b0e4cef3b5470b610f14fb9faa5ee7f63954 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 5.11 < 5.15.91 | 5.15.91 |
| linux | linux_kernel | >= 5.16 < 6.1.9 | 6.1.9 |
| linux | linux_kernel | >= 5.4.22 < 5.4.231 | 5.4.231 |
| linux | linux_kernel | >= 5.5.6 < 5.10.166 | 5.10.166 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: perf/x86/amd: fix potential integer overflow on shift of a int
vendor_redhat·2025-03-27·CVSS 5.5
CVE-2022-49748 [MEDIUM] CWE-190 kernel: perf/x86/amd: fix potential integer overflow on shift of a int
kernel: perf/x86/amd: fix potential integer overflow on shift of a int
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/amd: fix potential integer overflow on shift of a int
The left shift of int 32 bit integer constant 1 is evaluated using 32 bit
arithmetic and then passed as a 64 bit function argument. In the case where
i is 32 or more this can lead to an overflow. Avoid this by shifting
using the BIT_ULL macro instead.
A flaw was found in the support for AMD processors in the Linux kernel. An improper left shift of a 32-bit integer can cause an integer overflow, possibly impacting system stability and resulting in a denial of service.
Statement: This issue has been fixed in Red Hat Enterprise Linux 9.3 via RHSA-2023:6583 [1].
[1]. https://access.redhat.com
Debian
CVE-2022-49748: linux - In the Linux kernel, the following vulnerability has been resolved: perf/x86/am...
vendor_debian·2022·CVSS 5.5
CVE-2022-49748 [MEDIUM] CVE-2022-49748: linux - In the Linux kernel, the following vulnerability has been resolved: perf/x86/am...
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit integer constant 1 is evaluated using 32 bit arithmetic and then passed as a 64 bit function argument. In the case where i is 32 or more this can lead to an overflow. Avoid this by shifting using the BIT_ULL macro instead.
Scope: local
bookworm: resolved (fixed in 6.1.11-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.11-1)
sid: resolved (fixed in 6.1.11-1)
trixie: resolved (fixed in 6.1.11-1)
GHSA
GHSA-hjff-56wf-4v5f: In the Linux kernel, the following vulnerability has been resolved:
perf/x86/amd: fix potential integer overflow on shift of a int
The left shift of
ghsa_unreviewed·2025-03-27
CVE-2022-49748 [MEDIUM] CWE-190 GHSA-hjff-56wf-4v5f: In the Linux kernel, the following vulnerability has been resolved:
perf/x86/amd: fix potential integer overflow on shift of a int
The left shift of
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/amd: fix potential integer overflow on shift of a int
The left shift of int 32 bit integer constant 1 is evaluated using 32 bit
arithmetic and then passed as a 64 bit function argument. In the case where
i is 32 or more this can lead to an overflow. Avoid this by shifting
using the BIT_ULL macro instead.
OSV
CVE-2022-49748: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of i
osv·2025-03-27·CVSS 5.5
CVE-2022-49748 [MEDIUM] CVE-2022-49748: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of i
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit integer constant 1 is evaluated using 32 bit arithmetic and then passed as a 64 bit function argument. In the case where i is 32 or more this can lead to an overflow. Avoid this by shifting using the BIT_ULL macro instead.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/08245672cdc6505550d1a5020603b0a8d4a6dcc7https://git.kernel.org/stable/c/14cc13e433e1067557435b1adbf05608d7d47a93https://git.kernel.org/stable/c/a4d01fb87ece45d4164fd725890211ccf9a307a9https://git.kernel.org/stable/c/f84c9b72fb200633774704d8020f769c88a4b249https://git.kernel.org/stable/c/fbf7b0e4cef3b5470b610f14fb9faa5ee7f63954
2025-03-27
Published