CVE-2022-48938

CDC-NCM: avoid overflow in sanity checking

Published Aug 22, 2024 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

A broken device may give an extreme offset like 0xFFF0
and a reasonable length for a fragment. In the sanity
check as formulated now, this will create an integer
overflow, defeating the sanity check. Both offset
and offset + len need to be checked in such a manner
that no overflow can occur.
And those quantities should be unsigned.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-7121-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7121-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7121-3 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-7148-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7159-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7159-2 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7159-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7159-4 Linux kernel (IoT) vulnerabilities
Ubuntu USN Ubuntu USN USN-7159-5 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-7195-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7195-2 Linux kernel (Azure) vulnerabilities
History
Type Values Removed Values Added
Weaknesses CWE-120
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-190
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Type Values Removed Values Added
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.
Title CDC-NCM: avoid overflow in sanity checking
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
Linux
Published
Updated
May 23, 2026, 3:21 PM
Reserved
Aug 22, 2024, 1:27 AM
Status
Modified
Published
Aug 22, 2024, 4:15 AM
Modified
Jun 17, 2026, 5:16 AM
Severity
Moderate
Public date
Aug 22, 2024, 12:00 AM