Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-49280 Details

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent underflow in nfssvc_decode_writeargs() Smatch complains: fs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs() warn: no lower bound on 'args->len' Change the type to unsigned to prevent this issue.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/184416d4b98509fb4c3d8fc3d6dc1437896cc159 kernel.orgPatch
https://git.kernel.org/stable/c/2764af8ce0bf03cc43ee4a11897cab96bde6caae kernel.orgPatch
https://git.kernel.org/stable/c/413d8fefafe531a9442bb623e3fe292a38f88d65 kernel.orgPatch
https://git.kernel.org/stable/c/614a61e1592051cc42d3c38f899c9f7bdaad8a1d kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-191Integer Underflow (Wrap or Wraparound)[email protected]
CWE-191Integer Underflow (Wrap or Wraparound)CISA-ADP

Affected Products

ProductVersions
linux linux kernel
< 4.9.311
>= 4.10, < 4.14.276
>= 4.15, < 4.19.238
>= 4.20, < 5.4.189
>= 5.5, < 5.10.110

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-49280
NVD Published Date:
Feb 26, 2025
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2022-49280 Details - Not Deferred