CVE-2022-50749
published 2025-12-24CVE-2022-50749: In the Linux kernel, the following vulnerability has been resolved: acct: fix potential integer overflow in encode_comp_t() The integer overflow is descripted…
PriorityP423low5.5
EPSS
0.25%
16.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is descripted with following codes:
> 317 static comp_t encode_comp_t(u64 value)
> 318 {
> 319 int exp, rnd;
......
> 341 exp 342 exp += value;
> 343 return exp;
> 344 }
Currently comp_t is defined as type of '__u16', but the variable 'exp' is
type of 'int', so overflow would happen when variable 'exp' in line 343 is
greater than 65535.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e93f995a591c352d35d89c518c54f790e1537754 | e93f995a591c352d35d89c518c54f790e1537754 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < cf60bbca1b83a7e0927e36dbf178328982927886 | cf60bbca1b83a7e0927e36dbf178328982927886 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1750a0983c455a9b3badd848471fc8d58cb61f67 | 1750a0983c455a9b3badd848471fc8d58cb61f67 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a815a3e019456c94b03bd183e7ac22fd29e9e6fd | a815a3e019456c94b03bd183e7ac22fd29e9e6fd |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6edd0cdee5780fd5f43356b72b29a2a6d48ef6da | 6edd0cdee5780fd5f43356b72b29a2a6d48ef6da |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ebe16676e1dcaa4556ec4d36ca40c82e99e88cfa | ebe16676e1dcaa4556ec4d36ca40c82e99e88cfa |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2224897d8187dc22a83e05d9361efcccf67bcf12 | 2224897d8187dc22a83e05d9361efcccf67bcf12 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0aac6e60c464a5f942f995428e67f8ae1c422250 | 0aac6e60c464a5f942f995428e67f8ae1c422250 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c5f31c655bcc01b6da53b836ac951c1556245305 | c5f31c655bcc01b6da53b836ac951c1556245305 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.12 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.1.1 acct encode_comp_t integer overflow (Nessus ID 279767 / WID-SEC-2025-2929)
vuldb·2026-04-21
CVE-2022-50749 [CRITICAL] Linux Kernel up to 6.1.1 acct encode_comp_t integer overflow (Nessus ID 279767 / WID-SEC-2025-2929)
A vulnerability was found in Linux Kernel up to 6.1.1. It has been rated as critical. This affects the function encode_comp_t of the component acct. The manipulation leads to integer overflow.
This vulnerability is listed as CVE-2022-50749. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is advised.
OSV
acct: fix potential integer overflow in encode_comp_t()
osv·2025-12-24
CVE-2022-50749 acct: fix potential integer overflow in encode_comp_t()
acct: fix potential integer overflow in encode_comp_t()
In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is descripted with following codes:
> 317 static comp_t encode_comp_t(u64 value)
> 318 {
> 319 int exp, rnd;
......
> 341 exp 342 exp += value;
> 343 return exp;
> 344 }
Currently comp_t is defined as type of '__u16', but the variable 'exp' is
type of 'int', so overflow would happen when variable 'exp' in line 343 is
greater than 65535.
OSV
CVE-2022-50749: In the Linux kernel, the following vulnerability has been resolved: acct: fix potential integer overflow in encode_comp_t() The integer overflow is de
osv·2025-12-24
CVE-2022-50749 CVE-2022-50749: In the Linux kernel, the following vulnerability has been resolved: acct: fix potential integer overflow in encode_comp_t() The integer overflow is de
In the Linux kernel, the following vulnerability has been resolved: acct: fix potential integer overflow in encode_comp_t() The integer overflow is descripted with following codes: > 317 static comp_t encode_comp_t(u64 value) > 318 { > 319 int exp, rnd; ...... > 341 exp 342 exp += value; > 343 return exp; > 344 } Currently comp_t is defined as type of '__u16', but the variable 'exp' is type of 'int', so overflow would happen when variable 'exp' in line 343 is greater than 65535.
GHSA
GHSA-xpg5-5j2p-2g3r: In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is
ghsa_unreviewed·2025-12-24
CVE-2022-50749 GHSA-xpg5-5j2p-2g3r: In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is
In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is descripted with following codes:
> 317 static comp_t encode_comp_t(u64 value)
> 318 {
> 319 int exp, rnd;
......
> 341 exp 342 exp += value;
> 343 return exp;
> 344 }
Currently comp_t is defined as type of '__u16', but the variable 'exp' is
type of 'int', so overflow would happen when variable 'exp' in line 343 is
greater than 65535.
Red Hat
kernel: acct: fix potential integer overflow in encode_comp_t()
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2022-50749 [LOW] CWE-190 kernel: acct: fix potential integer overflow in encode_comp_t()
kernel: acct: fix potential integer overflow in encode_comp_t()
In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is descripted with following codes:
> 317 static comp_t encode_comp_t(u64 value)
> 318 {
> 319 int exp, rnd;
......
> 341 exp 342 exp += value;
> 343 return exp;
> 344 }
Currently comp_t is defined as type of '__u16', but the variable 'exp' is
type of 'int', so overflow would happen when variable 'exp' in line 343 is
greater than 65535.
An integer overflow flaw was found in the Linux kernel's process accounting subsystem. In the encode_comp_t() function, the variable 'exp' is declared as an int but is returned as comp_t (a __u16). When the computed value exceeds 65535, the return va
Debian
CVE-2022-50749: linux - In the Linux kernel, the following vulnerability has been resolved: acct: fix p...
vendor_debian·2022
CVE-2022-50749 CVE-2022-50749: linux - In the Linux kernel, the following vulnerability has been resolved: acct: fix p...
In the Linux kernel, the following vulnerability has been resolved: acct: fix potential integer overflow in encode_comp_t() The integer overflow is descripted with following codes: > 317 static comp_t encode_comp_t(u64 value) > 318 { > 319 int exp, rnd; ...... > 341 exp 342 exp += value; > 343 return exp; > 344 } Currently comp_t is defined as type of '__u16', but the variable 'exp' is type of 'int', so overflow would happen when variable 'exp' in line 343 is greater than 65535.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50749 kernel: acct: fix potential integer overflow in encode_comp_t()
bugzilla·2025-12-24
CVE-2022-50749 [LOW] CVE-2022-50749 kernel: acct: fix potential integer overflow in encode_comp_t()
CVE-2022-50749 kernel: acct: fix potential integer overflow in encode_comp_t()
In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is descripted with following codes:
> 317 static comp_t encode_comp_t(u64 value)
> 318 {
> 319 int exp, rnd;
......
> 341 exp 342 exp += value;
> 343 return exp;
> 344 }
Currently comp_t is defined as type of '__u16', but the variable 'exp' is
type of 'int', so overflow would happen when variable 'exp' in line 343 is
greater than 65535.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122451-CVE-2022-50749-dae0@gregkh/T
Wiz
CVE-2022-50749 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50749 CVE-2022-50749 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50749 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
acct: fix potential integer overflow in encode_comp_t()
The integer overflow is descripted with following codes:
317 static comp_t encode_comp_t(u64 value)
318 {
319 int exp, rnd;
......
341 exp <<= MANTSIZE;
342 exp += value;
343 return exp;
344 }
Currently comp_t is defined as type of '__u16', but the variable 'exp' is
type of 'int', so overflow would happen when variable 'exp' in line 343 is
greater than 65535.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Perc
https://git.kernel.org/stable/c/0aac6e60c464a5f942f995428e67f8ae1c422250https://git.kernel.org/stable/c/1750a0983c455a9b3badd848471fc8d58cb61f67https://git.kernel.org/stable/c/2224897d8187dc22a83e05d9361efcccf67bcf12https://git.kernel.org/stable/c/6edd0cdee5780fd5f43356b72b29a2a6d48ef6dahttps://git.kernel.org/stable/c/a815a3e019456c94b03bd183e7ac22fd29e9e6fdhttps://git.kernel.org/stable/c/c5f31c655bcc01b6da53b836ac951c1556245305https://git.kernel.org/stable/c/cf60bbca1b83a7e0927e36dbf178328982927886https://git.kernel.org/stable/c/e93f995a591c352d35d89c518c54f790e1537754https://git.kernel.org/stable/c/ebe16676e1dcaa4556ec4d36ca40c82e99e88cfa
2025-12-24
Published