UnratedFix available
CDC-NCM: avoid overflow in sanity checking
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.19.323, 5.10.103, 5.15.26, 5.16.12, 5.4.285
- CVEs
- CVE-2022-48938
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 07:01 UTC · Revision 1
Source evidence
CDC-NCM: avoid overflow in sanity checking
core-osv · Original sourcePublished 22 Aug 2024, 03:31 UTC
In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.
osv:CVE-2022-48938
Kernel
Fixed versions: 4.19.323, 5.4.285, 5.10.103, 5.15.26, 5.16.12
Complete source record
{
"id": "02b8f66783ca6314e0098c2d1ea62f3fdacbf33a353e2134a3bb7b6271fda837",
"url": "https://osv.dev/vulnerability/CVE-2022-48938",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CDC-NCM: avoid overflow in sanity checking",
"summary": "In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.",
"evidence": "osv:CVE-2022-48938",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.19.323",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.285",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.103",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.26",
"evidence": "/affected/1/ranges"
},
{
"value": "5.16.12",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2022-48938",
"aliases": [
"CVE-2022-48938"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4ca8b8855264cf1439cdab3da7049bd1e3c2a9e6"
},
{
"fixed": "a612395c7631918e0e10ea48b9ce5ab4340f26a6"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "a270ca35a9499b58366d696d3290eaa4697a42db"
},
{
"fixed": "9957fbf34f52a4d8945d1bf39aae400ef9a11246"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "0fa81b304a7973a499f844176ca031109487dd31"
},
{
"fixed": "69560efa001397ebb8dc1c3e6a3ce00302bb9f7f"
},
{
"fixed": "49909c9f8458cacb5b241106cba65aba5a6d8f4c"
},
{
"fixed": "7b737e47b87589031f0d4657f6d7b0b770474925"
},
{
"fixed": "8d2b1a1ec9f559d30b724877da4ce592edc41fdc"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4.19.285"
},
{
"fixed": "4.19.323"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.4.245"
},
{
"fixed": "5.4.285"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4.14.317"
},
{
"fixed": "4.15"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "8cf7db86a8984ffa3a3388a8df12bc0aa4c79bd7"
}
]
}
],
"versions": [
"v4.19.322",
"v4.19.321",
"v4.19.320",
"v4.19.319",
"v4.19.318",
"v4.19.317",
"v4.19.316",
"v4.19.315",
"v4.19.314",
"v4.19.313",
"v4.19.312",
"v4.19.311",
"v4.19.310",
"v4.19.309",
"v4.19.308",
"v4.19.307",
"v4.19.306",
"v4.19.305",
"v4.19.304",
"v4.19.303",
"v4.19.302",
"v4.19.301",
"v4.19.300",
"v4.19.299",
"v4.19.298",
"v4.19.297",
"v4.19.296",
"v4.19.295",
"v4.19.294",
"v4.19.293",
"v4.19.292",
"v4.19.291",
"v4.19.290",
"v4.19.289",
"v4.19.288",
"v4.19.287",
"v4.19.286",
"v4.19.285",
"v5.4.284",
"v5.4.283",
"v5.4.282",
"v5.4.281",
"v5.4.280",
"v5.4.279",
"v5.4.278",
"v5.4.277",
"v5.4.276",
"v5.4.275",
"v5.4.274",
"v5.4.273",
"v5.4.272",
"v5.4.271",
"v5.4.270",
"v5.4.269",
"v5.4.268",
"v5.4.267",
"v5.4.266",
"v5.4.265",
"v5.4.264",
"v5.4.263",
"v5.4.262",
"v5.4.261",
"v5.4.260",
"v5.4.259",
"v5.4.258",
"v5.4.257",
"v5.4.256",
"v5.4.255",
"v5.4.254",
"v5.4.253",
"v5.4.252",
"v5.4.251",
"v5.4.250",
"v5.4.249",
"v5.4.248",
"v5.4.247",
"v5.4.246",
"v5.4.245",
"v4.14.336",
"v4.14.335",
"v4.14.334",
"v4.14.333",
"v4.14.332",
"v4.14.331",
"v4.14.330",
"v4.14.329",
"v4.14.328",
"v4.14.327",
"v4.14.326",
"v4.14.325",
"v4.14.324",
"v4.14.323",
"v4.14.322",
"v4.14.321",
"v4.14.320",
"v4.14.319",
"v4.14.318",
"v4.14.317"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48938.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.19.323"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.285"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.103"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.7.0"
},
{
"fixed": "5.15.26"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.16.12"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48938.json"
}
}
],
"modified": "2026-10-28T02:30:26.728071232Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/49909c9f8458cacb5b241106cba65aba5a6d8f4c",
"https://git.kernel.org/stable/c/69560efa001397ebb8dc1c3e6a3ce00302bb9f7f",
"https://git.kernel.org/stable/c/7b737e47b87589031f0d4657f6d7b0b770474925",
"https://git.kernel.org/stable/c/8d2b1a1ec9f559d30b724877da4ce592edc41fdc",
"https://git.kernel.org/stable/c/9957fbf34f52a4d8945d1bf39aae400ef9a11246",
"https://git.kernel.org/stable/c/a612395c7631918e0e10ea48b9ce5ab4340f26a6",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48938.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-48938",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48938.json"
}
},
"related_cves": [
{
"value": "CVE-2022-48938",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 493203,
"published_at": "2024-08-22T03:31:33.381+00:00"
}