CVE - CVE-2022-48828

CVE-ID
CVE-2022-48828	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and NFSv4 both define file size as an unsigned 64-bit type. Thus there is a range of valid file size values an NFS client can send that is already larger than Linux can handle. Currently decode_fattr4() dumps a full u64 value into ia_size. If that value happens to be larger than S64_MAX, then ia_size underflows. I'm about to fix up the NFSv3 behavior as well, so let's catch the underflow in the common code path: nfsd_setattr().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/38d02ba22e43b6fc7d291cf724bc6e3b7be6626b URL:https://git.kernel.org/stable/c/38d02ba22e43b6fc7d291cf724bc6e3b7be6626b MISC:https://git.kernel.org/stable/c/8e0ecaf7a7e57b30284d6b3289cc436100fadc48 URL:https://git.kernel.org/stable/c/8e0ecaf7a7e57b30284d6b3289cc436100fadc48 MISC:https://git.kernel.org/stable/c/da22ca1ad548429d7822011c54cfe210718e0aa7 URL:https://git.kernel.org/stable/c/da22ca1ad548429d7822011c54cfe210718e0aa7 MISC:https://git.kernel.org/stable/c/e6faac3f58c7c4176b66f63def17a34232a17b0e URL:https://git.kernel.org/stable/c/e6faac3f58c7c4176b66f63def17a34232a17b0e
Assigning CNA
kernel.org
Date Record Created
20240716	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240716)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)