Prevention of Underflow in Linux Kernel's RDMA/nldev Package
Summary
CVE-2022-49199: In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code checks "index" for an upper bound but it does not check for negatives. Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware interaction and resource management. The RDMA (Remote Direct Memory Access) subsystem within the kernel facilitates high-performance networking by allowing direct memory access from one computer to another without involving the CPU. This subsystem is crucial for applications requiring low-latency and high-throughput communication. However, vulnerabilities in this subsystem can lead to severe security risks, including data corruption and unauthorized access.
Vulnerability Detail
The vulnerability identified as CVE-2022-49199 arises from a failure to properly validate the 'index' variable in the nldev_stat_set_counter_dynamic_doit() function within the RDMA/nldev code. While the code checks for an upper bound, it neglects to verify if the index is negative, which can lead to an underflow condition. This oversight can potentially allow an attacker to manipulate memory access, leading to unexpected behavior or crashes in the system. The implications of this vulnerability are significant, as it could be exploited to compromise system integrity and security.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2022-49199 is a critical vulnerability in the Linux kernel's RDMA/nldev subsystem that can lead to serious security risks due to underflow conditions. It is essential to update to the patched version 5.17.3-1 to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49199 is a vulnerability in the Linux kernel's RDMA/nldev subsystem that can lead to underflow conditions due to improper validation of the 'index' variable.
Exploitation of this vulnerability may lead to memory corruption, crashes, or unauthorized access, compromising the integrity and security of the system.
Yes, a patch is available in version 5.17.3-1 of the Linux package for both Debian 12 and Debian 13.
You should update your Linux package to the fixed version 5.17.3-1 using the command: sudo apt-get update && sudo apt-get install linux=5.17.3-1.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json. You can check your application for vulnerabilities without signup at the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
