CVE-2022-49280

NFSD: prevent underflow in nfssvc_decode_writeargs()

CRITICAL 9.8

At a glance

Source: NVD
EPSS: EPSS 0.69 % · percentile 53 (2026-10-28)
State: PUBLISHED
Published: 2025-02-26 01:56 UTC
Updated: 2026-08-05 08:54 UTC
Assigner: Linux
NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent underflow in nfssvc_decode_writeargs() Smatch complains: fs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs() warn: no lower bound on 'args->len' Change the type to unsigned to prevent this issue.

Weaknesses (CWE)

CWE-191 — Integer Underflow

References

Scores

Version	Score	Vector	Scored by
CVSS 3.1	CRITICAL 9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
CVSS 3.1	MEDIUM 5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP
CVSS 3.1	CRITICAL 9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1	MEDIUM 5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)
CVSS 3.1	MEDIUM 5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

European references

ENISA EUVD · EUVD-2022-54946
GCVE · GCVE-0-2022-49280

CERT-FR advisories

CERTFR-2025-AVI-0336 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2025-AVI-0307 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2025-AVI-0252 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 4.9.311
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.10 < 4.14.276
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.15 < 4.19.238
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.20 < 5.4.189
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.5 < 5.10.110
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.11 < 5.15.33
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.16 < 5.16.19
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.17 < 5.17.2

Affected products

Product	Versions
Linux · Linux	affected a51b5b737a0be93fae6ea2a18df03ab2359a3f4b < 614a61e1592051cc42d3c38f899c9f7bdaad8a1d ; affected a51b5b737a0be93fae6ea2a18df03ab2359a3f4b < 2764af8ce0bf03cc43ee4a11897cab96bde6caae ; affected a51b5b737a0be93fae6ea2a18df03ab2359a3f4b < 413d8fefafe531a9442bb623e3fe292a38f88d65 ; affected a51b5b737a0be93fae6ea2a18df03ab2359a3f4b < 184416d4b98509fb4c3d8fc3d6dc1437896cc159
Linux · Linux	affected 5.12 ; unaffected 0 < 5.12 ; unaffected 5.15.33 ≤ 5.15.* ; unaffected 5.16.19 ≤ 5.16.* ; unaffected 5.17.2 ≤ 5.17.* ; unaffected 5.18 ≤ *

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD