CVE-2022-49748 Details
Description
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit integer constant 1 is evaluated using 32 bit arithmetic and then passed as a 64 bit function argument. In the case where i is 32 or more this can lead to an overflow. Avoid this by shifting using the BIT_ULL macro instead.
A potential integer overflow vulnerability has been identified in the Linux kernel's perf subsystem for AMD processors. The issue arises from the left shift of a 32-bit integer constant, which is processed using 32-bit arithmetic and then passed as a 64-bit argument to a function. If the shift amount is 32 or more, this can result in an overflow. The vulnerability has been addressed by modifying the shift operation to use the BIT_ULL macro, ensuring proper handling of the value as an unsigned long long.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/08245672cdc6505550d1a5020603b0a8d4a6dcc7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/14cc13e433e1067557435b1adbf05608d7d47a93 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a4d01fb87ece45d4164fd725890211ccf9a307a9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f84c9b72fb200633774704d8020f769c88a4b249 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fbf7b0e4cef3b5470b610f14fb9faa5ee7f63954 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
| CWE-190 | Integer Overflow or Wraparound | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.4.22, < 5.4.231 >= 5.5.6, < 5.10.166 >= 5.11, < 5.15.91 >= 5.16, < 6.1.9 6.2 rc1 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| Apr 14, 2025 | Initial Analysis | [email protected] |
| Mar 27, 2025 | New CVE Received | kernel.org |