In the Linux kernel, the following vulnerability has been resolved:
NFSD: prevent underflow in nfssvcdecodewriteargs()
Smatch complains:
fs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs()
warn: no lower bound on 'args->len'
Change the type to unsigned to prevent this issue.
[
{
"signature_version": "v1",
"id": "CVE-2022-49280-0bc8b5c7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"24675951170830160080974546734928535780",
"122976981679355760665924721425800823800",
"37910351369218885988846139643204205074",
"39711050546269652848445494770215581360"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a33e0de60feda402d05ac8a6cf409c19ea3e0b3",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-1ef3cf21",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"248322763512690846959080589813869555234",
"170732709219156239845408100319478013753",
"293696096339561709272791694354057429639"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413d8fefafe531a9442bb623e3fe292a38f88d65",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-228ac9fc",
"signature_type": "Function",
"digest": {
"length": 646.0,
"function_hash": "304892727158680843093692453422348924401"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2764af8ce0bf03cc43ee4a11897cab96bde6caae",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-337c928c",
"signature_type": "Function",
"digest": {
"length": 646.0,
"function_hash": "304892727158680843093692453422348924401"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@184416d4b98509fb4c3d8fc3d6dc1437896cc159",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-3e0a6bff",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"6827758422371504870200200655027214706",
"229362959134352822363737567054485190729",
"169452614365283085851497212757678089965"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f0f048c1bfa7867d565a95fd8c28f4484ba1043",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-5b914994",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"34942273084272920472097523515978526408",
"52238802428703453370972826946026691524",
"218366808470725341975349090416076645336"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@438068f4912183a59fcb6b7496a06437f7fd4e2b",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-68351c1c",
"signature_type": "Function",
"digest": {
"length": 646.0,
"function_hash": "304892727158680843093692453422348924401"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413d8fefafe531a9442bb623e3fe292a38f88d65",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-6fb5ffaf",
"signature_type": "Function",
"digest": {
"length": 646.0,
"function_hash": "304892727158680843093692453422348924401"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@614a61e1592051cc42d3c38f899c9f7bdaad8a1d",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-813c8774",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"308941418133415492082711127148848851447",
"216916813396789170706678421698732056274",
"37910351369218885988846139643204205074",
"319768712278946437002906371627496929766"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@438068f4912183a59fcb6b7496a06437f7fd4e2b",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-8461db5d",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"164230270306914448770589625874933279917",
"220984635008130985809678367838267614256",
"182088510541346572073573731253971053834",
"228649222937153154105072568932704409854"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f0f048c1bfa7867d565a95fd8c28f4484ba1043",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-92d3af5d",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76787236209842138838784991812755214926",
"220984635008130985809678367838267614256",
"182088510541346572073573731253971053834",
"27033997971400270141415436899154519838"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@614a61e1592051cc42d3c38f899c9f7bdaad8a1d",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-985cdf8f",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"34942273084272920472097523515978526408",
"52238802428703453370972826946026691524",
"218366808470725341975349090416076645336"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a33e0de60feda402d05ac8a6cf409c19ea3e0b3",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-9b9dff4c",
"signature_type": "Function",
"digest": {
"length": 435.0,
"function_hash": "42338872826996412993886775164508605988"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@438068f4912183a59fcb6b7496a06437f7fd4e2b",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-aa5625cf",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76787236209842138838784991812755214926",
"220984635008130985809678367838267614256",
"182088510541346572073573731253971053834",
"228649222937153154105072568932704409854"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65e21cc042f4c1518c8c55283f53bc725b78419d",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-ad6eb6b0",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"6827758422371504870200200655027214706",
"229362959134352822363737567054485190729",
"169452614365283085851497212757678089965"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65e21cc042f4c1518c8c55283f53bc725b78419d",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-b28b4449",
"signature_type": "Function",
"digest": {
"length": 738.0,
"function_hash": "168802673413509227381131770381054766706"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65e21cc042f4c1518c8c55283f53bc725b78419d",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-b28f87d0",
"signature_type": "Function",
"digest": {
"length": 556.0,
"function_hash": "281972839252279317113585149900125597165"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f0f048c1bfa7867d565a95fd8c28f4484ba1043",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-b9d9a01a",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"248322763512690846959080589813869555234",
"170732709219156239845408100319478013753",
"293696096339561709272791694354057429639"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@184416d4b98509fb4c3d8fc3d6dc1437896cc159",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-dcb22ccb",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76787236209842138838784991812755214926",
"220984635008130985809678367838267614256",
"182088510541346572073573731253971053834",
"27033997971400270141415436899154519838"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@184416d4b98509fb4c3d8fc3d6dc1437896cc159",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-ddca0b79",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76787236209842138838784991812755214926",
"220984635008130985809678367838267614256",
"182088510541346572073573731253971053834",
"27033997971400270141415436899154519838"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2764af8ce0bf03cc43ee4a11897cab96bde6caae",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-e00e6ae5",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"248322763512690846959080589813869555234",
"170732709219156239845408100319478013753",
"293696096339561709272791694354057429639"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@614a61e1592051cc42d3c38f899c9f7bdaad8a1d",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-e1290604",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76787236209842138838784991812755214926",
"220984635008130985809678367838267614256",
"182088510541346572073573731253971053834",
"27033997971400270141415436899154519838"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413d8fefafe531a9442bb623e3fe292a38f88d65",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-e2424d02",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"6827758422371504870200200655027214706",
"229362959134352822363737567054485190729",
"169452614365283085851497212757678089965"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85259340fc9bd54e3d567b41b881ecb4d0055da1",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-f42067a7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108502037110284336660593669090201640315",
"248322763512690846959080589813869555234",
"170732709219156239845408100319478013753",
"293696096339561709272791694354057429639"
]
},
"target": {
"file": "fs/nfsd/xdr.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2764af8ce0bf03cc43ee4a11897cab96bde6caae",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-f90c8af4",
"signature_type": "Function",
"digest": {
"length": 556.0,
"function_hash": "281972839252279317113585149900125597165"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85259340fc9bd54e3d567b41b881ecb4d0055da1",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-fe820c01",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"164230270306914448770589625874933279917",
"220984635008130985809678367838267614256",
"182088510541346572073573731253971053834",
"228649222937153154105072568932704409854"
]
},
"target": {
"file": "fs/nfsd/nfsproc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85259340fc9bd54e3d567b41b881ecb4d0055da1",
"deprecated": false
},
{
"signature_version": "v1",
"id": "CVE-2022-49280-ffaf1106",
"signature_type": "Function",
"digest": {
"length": 434.0,
"function_hash": "37530811609632804552990583267548021776"
},
"target": {
"file": "fs/nfsd/nfsproc.c",
"function": "nfsd_proc_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a33e0de60feda402d05ac8a6cf409c19ea3e0b3",
"deprecated": false
}
]