Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-49952 Details

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on probe Add the missing sanity check on the probed-session count to avoid corrupting memory beyond the fixed-size slab-allocated session array when there are more than FASTRPC_MAX_SESSIONS sessions defined in the devicetree.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0e33b0f322fecd7a92d9dc186535cdf97940a856 kernel.orgPatch
https://git.kernel.org/stable/c/9baa1415d9abdd1e08362ea2dcfadfacee8690b5 kernel.orgPatch
https://git.kernel.org/stable/c/c0425c2facd9166fa083f90c9f3187ace0c7837a kernel.orgPatch
https://git.kernel.org/stable/c/c99bc901d5eb9fbdd7bd39f625e170ce97390336 kernel.orgPatch
https://git.kernel.org/stable/c/ec186b9f4aa2e6444d5308a6cc268aada7007639 kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-787Out-of-bounds Write[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.1, < 5.4.213
>= 5.5, < 5.10.142
>= 5.11, < 5.15.66
>= 5.16, < 5.19.8
6.0 rc1

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-49952
NVD Published Date:
Jun 18, 2025
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2022-49952 Details - Not Deferred