CVE - CVE-2022-49208

CVE-ID
CVE-2022-49208	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent some integer underflows My static checker complains that: drivers/infiniband/hw/irdma/ctrl.c:3605 irdma_sc_ceq_init() warn: can subtract underflow 'info->dev->hmc_fpm_misc.max_ceqs'? It appears that "info->dev->hmc_fpm_misc.max_ceqs" comes from the firmware in irdma_sc_parse_fpm_query_buf() so, yes, there is a chance that it could be zero. Even if we trust the firmware, it's easy enough to change the condition just as a hardenning measure.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/6f6dbb819dfc1a35bcb8b709b5c83a3ea8beff75 URL:https://git.kernel.org/stable/c/6f6dbb819dfc1a35bcb8b709b5c83a3ea8beff75 MISC:https://git.kernel.org/stable/c/7340c3675d7ac946f4019b84cd7c64ed542dfe4c URL:https://git.kernel.org/stable/c/7340c3675d7ac946f4019b84cd7c64ed542dfe4c MISC:https://git.kernel.org/stable/c/d52dab6e03550f9c97121b0c11c0a3ed78ee76a4 URL:https://git.kernel.org/stable/c/d52dab6e03550f9c97121b0c11c0a3ed78ee76a4 MISC:https://git.kernel.org/stable/c/f21056f15bbeacab7b4b87af232f5599d1f2bff1 URL:https://git.kernel.org/stable/c/f21056f15bbeacab7b4b87af232f5599d1f2bff1
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)