What’s Vulnerable › Vulnerabilities

CVE-2022-49356: SUNRPC: Trap RDMA segment overflows

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Trap RDMA segment overflows Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Caught with KASAN. The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.

Affected products

• Linux kernel: from 5.11 before 5.15.47; from 5.16 before 5.17.15; from 5.18 before 5.18.4; 5.19-rc1 — fixed in 5.15.47, 5.17.15, 5.18.4

How to fix

Upgrade to a fixed version: Linux kernel 5.15.47, 5.17.15, 5.18.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328
• https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5
• https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e
• https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337

Get alerted when CVE-2022-49356 or the next vulnerability affects your stack