PT-2025-8547 · Linux+1 · Linux Kernel+1

Published 2022-01-01 · Updated 2025-02-27 · CVE-2022-49614

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the nvme component, where a change has been made to use a struct group for generic command dwords. This modification allows the trace event to determine the full size of the data intended to be copied, thereby silencing read overflow checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-49614

Affected Products

Debian

Linux Kernel

References · 10

• https://osv.dev/vulnerability/CVE-2022-49614 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49614 · Security Note
• https://ubuntu.com/security/CVE-2022-49614 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49614 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49614 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49614 · Vendor Advisory
• https://git.kernel.org/stable/c/5c629dc9609dc43492a7bc8060cc6120875bf096 · Note
• https://git.kernel.org/linus/5c629dc9609dc43492a7bc8060cc6120875bf096 · Note
• https://git.kernel.org/stable/c/3d8b35387e01cab217dc4691a6f770cbb6ed852c · Note
• https://twitter.com/CVEnew/status/1894867723794166029 · Twitter Post