CVE-2022-49748

MEDIUM EPSS 7.5%
Published Mar 27, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Mar 27, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit integer constant 1 is evaluated using 32 bit arithmetic and then passed as a 64 bit function argument. In the case where i is 32 or more this can lead to an overflow. Avoid this by shifting using the BIT_ULL macro instead.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
7.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-190 Integer Overflow or Wraparound Numeric Error

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥5.4.22  –  <5.4.231
linuxlinux_kernel*≥5.5.6  –  <5.10.166
linuxlinux_kernel*≥5.11  –  <5.15.91
linuxlinux_kernel*≥5.16  –  <6.1.9
linuxlinux_kernel6.2any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/08245672cdc6505550d1a5020603b0a8d4a6dcc7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/14cc13e433e1067557435b1adbf05608d7d47a93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a4d01fb87ece45d4164fd725890211ccf9a307a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f84c9b72fb200633774704d8020f769c88a4b249
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fbf7b0e4cef3b5470b610f14fb9faa5ee7f63954
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/08245672cdc6505550d1a5020603b0a8d4a6dcc7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/14cc13e433e1067557435b1adbf05608d7d47a93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a4d01fb87ece45d4164fd725890211ccf9a307a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f84c9b72fb200633774704d8020f769c88a4b249
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fbf7b0e4cef3b5470b610f14fb9faa5ee7f63954
    Patch