CVE-2022-49907
published 2025-05-01CVE-2022-49907: In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for __mdiobus_register Shifting signed…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.22%
12.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
Shifting signed 32-bit value by 31 bits is undefined, so changing
significant bit to unsigned. The UBSAN warning calltrace like below:
UBSAN: shift-out-of-bounds in drivers/net/phy/mdio_bus.c:586:27
left shift of 1 by 31 places cannot be represented in type 'int'
Call Trace:
dump_stack_lvl+0x7d/0xa5
dump_stack+0x15/0x1b
ubsan_epilogue+0xe/0x4e
__ubsan_handle_shift_out_of_bounds+0x1e7/0x20c
__mdiobus_register+0x49d/0x4e0
fixed_mdio_bus_init+0xd8/0x12d
do_one_initcall+0x76/0x430
kernel_init_freeable+0x3b3/0x422
kernel_init+0x24/0x1e0
ret_from_fork+0x1f/0x30
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.8-1 (bookworm) | linux 6.0.8-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < 20ed01a7b9af6e6a3c33761eebbb710ea6dd49b7 | 20ed01a7b9af6e6a3c33761eebbb710ea6dd49b7 |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < 7006176a3c863e3e353ce1b8a349ef5bb1b9320e | 7006176a3c863e3e353ce1b8a349ef5bb1b9320e |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < a3fafc974be37319679f36dc4e7cca7db1e02973 | a3fafc974be37319679f36dc4e7cca7db1e02973 |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < 4954b5359eb141499492fadfab891e28905509e2 | 4954b5359eb141499492fadfab891e28905509e2 |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < 634f066d02bdb22a26da7deb0c7617ab1a65fc9d | 634f066d02bdb22a26da7deb0c7617ab1a65fc9d |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < 985a88bf0b27193522bba7856b1763f428cef19d | 985a88bf0b27193522bba7856b1763f428cef19d |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < 6ce6f8f8f6316da6f92afe7490bc2f0b654d68e0 | 6ce6f8f8f6316da6f92afe7490bc2f0b654d68e0 |
| linux | linux | >= 4fd5f812c23c7deee6425f4a318e85c317cd1d6c < 40e4eb324c59e11fcb927aa46742d28aba6ecb8a | 40e4eb324c59e11fcb927aa46742d28aba6ecb8a |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 2.6.28 < 4.9.333 | 4.9.333 |
| linux | linux_kernel | >= 4.10 < 4.14.299 | 4.14.299 |
| linux | linux_kernel | >= 4.15 < 4.19.265 | 4.19.265 |
| linux | linux_kernel | >= 4.20 < 5.4.224 | 5.4.224 |
| linux | linux_kernel | >= 5.11 < 5.15.78 | 5.15.78 |
| linux | linux_kernel | >= 5.16 < 6.0.8 | 6.0.8 |
| linux | linux_kernel | >= 5.5 < 5.10.154 | 5.10.154 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j78r-hv87-26mj: In the Linux kernel, the following vulnerability has been resolved:
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
Shifting s
ghsa_unreviewed·2025-05-01
CVE-2022-49907 [HIGH] GHSA-j78r-hv87-26mj: In the Linux kernel, the following vulnerability has been resolved:
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
Shifting s
In the Linux kernel, the following vulnerability has been resolved:
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
Shifting signed 32-bit value by 31 bits is undefined, so changing
significant bit to unsigned. The UBSAN warning calltrace like below:
UBSAN: shift-out-of-bounds in drivers/net/phy/mdio_bus.c:586:27
left shift of 1 by 31 places cannot be represented in type 'int'
Call Trace:
dump_stack_lvl+0x7d/0xa5
dump_stack+0x15/0x1b
ubsan_epilogue+0xe/0x4e
__ubsan_handle_shift_out_of_bounds+0x1e7/0x20c
__mdiobus_register+0x49d/0x4e0
fixed_mdio_bus_init+0xd8/0x12d
do_one_initcall+0x76/0x430
kernel_init_freeable+0x3b3/0x422
kernel_init+0x24/0x1e0
ret_from_fork+0x1f/0x30
OSV
CVE-2022-49907: In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for __mdiobus_register Shifting sig
osv·2025-05-01·CVSS 7.8
CVE-2022-49907 [HIGH] CVE-2022-49907: In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for __mdiobus_register Shifting sig
In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for __mdiobus_register Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in drivers/net/phy/mdio_bus.c:586:27 left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c __mdiobus_register+0x49d/0x4e0 fixed_mdio_bus_init+0xd8/0x12d do_one_initcall+0x76/0x430 kernel_init_freeable+0x3b3/0x422 kernel_init+0x24/0x1e0 ret_from_fork+0x1f/0x30
Red Hat
kernel: net: mdio: fix undefined behavior in bit shift for __mdiobus_register
vendor_redhat·2025-05-01·CVSS 7.8
CVE-2022-49907 [HIGH] kernel: net: mdio: fix undefined behavior in bit shift for __mdiobus_register
kernel: net: mdio: fix undefined behavior in bit shift for __mdiobus_register
In the Linux kernel, the following vulnerability has been resolved:
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
Shifting signed 32-bit value by 31 bits is undefined, so changing
significant bit to unsigned. The UBSAN warning calltrace like below:
UBSAN: shift-out-of-bounds in drivers/net/phy/mdio_bus.c:586:27
left shift of 1 by 31 places cannot be represented in type 'int'
Call Trace:
dump_stack_lvl+0x7d/0xa5
dump_stack+0x15/0x1b
ubsan_epilogue+0xe/0x4e
__ubsan_handle_shift_out_of_bounds+0x1e7/0x20c
__mdiobus_register+0x49d/0x4e0
fixed_mdio_bus_init+0xd8/0x12d
do_one_initcall+0x76/0x430
kernel_init_freeable+0x3b3/0x422
kernel_init+0x24/0x1e0
ret_from_fork+0x1f/0x30
Statement: Undefin
Debian
CVE-2022-49907: linux - In the Linux kernel, the following vulnerability has been resolved: net: mdio: ...
vendor_debian·2022·CVSS 7.8
CVE-2022-49907 [HIGH] CVE-2022-49907: linux - In the Linux kernel, the following vulnerability has been resolved: net: mdio: ...
In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for __mdiobus_register Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in drivers/net/phy/mdio_bus.c:586:27 left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c __mdiobus_register+0x49d/0x4e0 fixed_mdio_bus_init+0xd8/0x12d do_one_initcall+0x76/0x430 kernel_init_freeable+0x3b3/0x422 kernel_init+0x24/0x1e0 ret_from_fork+0x1f/0x30
Scope: local
bookworm: resolved (fixed in 6.0.8-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: r
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/20ed01a7b9af6e6a3c33761eebbb710ea6dd49b7https://git.kernel.org/stable/c/40e4eb324c59e11fcb927aa46742d28aba6ecb8ahttps://git.kernel.org/stable/c/4954b5359eb141499492fadfab891e28905509e2https://git.kernel.org/stable/c/634f066d02bdb22a26da7deb0c7617ab1a65fc9dhttps://git.kernel.org/stable/c/6ce6f8f8f6316da6f92afe7490bc2f0b654d68e0https://git.kernel.org/stable/c/7006176a3c863e3e353ce1b8a349ef5bb1b9320ehttps://git.kernel.org/stable/c/985a88bf0b27193522bba7856b1763f428cef19dhttps://git.kernel.org/stable/c/a3fafc974be37319679f36dc4e7cca7db1e02973
2025-05-01
Published