Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Linux kernel RDMA component can miscount statistics

CVE-2022-49199 · published 1 year ago
Summary

The RDMA part of the Linux kernel could accept a negative index when updating counters, which may lead to incorrect statistics or unexpected behavior. This affects Linux kernel distributions such as the mainline kernel and Debian’s kernel packages. Apply the latest kernel updates provided by your Linux vendor to get the corrected code that prevents the negative index problem.

What to do
  • Update debian linux to version 5.17.3-1.
  • Update linux kernel to version 5.17.2.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 5.16, < 5.16.19
>= 5.17, < 5.17.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Debian:12 debian linux < 5.17.3-1
Fix: upgrade to 5.17.3-1
Linux linux kernel >= 5.17.0, < 5.17.2
Fix: upgrade to 5.17.2
Original advisory text
RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code checks "index" for an upper bound but it does not check for negatives. Change the type to unsigned to prevent underflows.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-191Integer Underflow (Wrap or Wraparound)
Timeline
Published26 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49199 · NVD
DEBIAN-CVE-2022-49199 · OSV
CVE-2022-49199 · OSV
Track software like this
Free during beta