What’s Vulnerable › Vulnerabilities

CVE-2022-49278: remoteproc: Fix count check in rproc_coredump_write()

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-191

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check in rproc_coredump_write() Check count for 0, to avoid a potential underflow. Make the check the same as the one in rproc_recovery_write().

Affected products

• Linux kernel: from 5.9 before 5.10.110; from 5.11 before 5.15.33; from 5.16 before 5.16.19; from 5.17 before 5.17.2 — fixed in 5.10.110, 5.15.33, 5.16.19, 5.17.2

How to fix

Upgrade to a fixed version: Linux kernel 5.10.110, 5.15.33, 5.16.19, 5.17.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/11572dad9fbadbd9269a2550f7e236b5b8c2d80c
• https://git.kernel.org/stable/c/34afac3c75fa08d6fabbab4c93f0a90618afaaa6
• https://git.kernel.org/stable/c/a8c3e53517985d69040a1b36a269e85f99cf0cea
• https://git.kernel.org/stable/c/b97b305656a7013690e7b6e310f0e827e0bbff90
• https://git.kernel.org/stable/c/f89672cc3681952f2d06314981a6b45f8b0045d1

Get alerted when CVE-2022-49278 or the next vulnerability affects your stack