PT-2025-8071 · Linux+1 · Linux Kernel+1

Published 2022-01-01 · Updated 2025-03-03 · CVE-2022-49143

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential overflow issue in the Linux kernel has been identified, specifically in the nbd dev add() function when handling the first minor value. If the index is a large number, it may become negative when forced to an integer, potentially causing an overflow when shifted by part shift. This could lead to a situation where sysfs complains about duplicate creation due to the resulting positive value. The issue is resolved by moving the index judgment to the front.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-49143

Affected Products

Debian

Linux Kernel

References · 5

• https://security-tracker.debian.org/tracker/CVE-2022-49143 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/linux · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49143 · Security Note
• https://twitter.com/CVEnew/status/1896414970973503669 · Twitter Post
• https://packages.debian.org/src:linux · Note