PT-2025-8071 · Linux+1 · Linux Kernel+1

Publicado 2022-01-01 · Atualizado 2025-03-03 · CVE-2022-49143

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential overflow issue in the Linux kernel has been identified, specifically in the nbd dev add() function when handling the first minor value. If the index is a large number, it may become negative when forced to an integer, potentially causing an overflow when shifted by part shift. This could lead to a situation where sysfs complains about duplicate creation due to the resulting positive value. The issue is resolved by moving the index judgment to the front.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2022-49143

Produtos afetados

Debian

Linux Kernel

Referências · 5

• https://twitter.com/CVEnew/status/1896414970973503669 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2022-49143 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/linux · Aviso do Fabricante
• https://packages.debian.org/src:linux · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49143 · Nota de Segurança