MediumFix available
RDMA/hfi1: Fix potential integer multiplication overflow errors
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of different types, an overflow is possible even when storing the result in a larger type. This is because the conversion is done after the multiplication. So arithmetic overflow and thus in incorrect value is possible. Correct an instance of this in the inter packet delay calculation. Fix by ensuring one of the operands is u64 which will promote the other to u64 as well ensuring no overflow.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.283, 4.19.247, 4.9.318, 5.10.121, 5.15.46, 5.17.14, 5.18.3, 5.4.198
- CVEs
- CVE-2022-49404
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 19:51 UTC · Revision 1
Source evidence
RDMA/hfi1: Fix potential integer multiplication overflow errors
core-osv · Original sourcePublished 26 Feb 2025, 02:12 UTC
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of different types, an overflow is possible even when storing the result in a larger type. This is because the conversion is done after the multiplication. So arithmetic overflow and thus in incorrect value is possible. Correct an instance of this in the inter packet delay calculation. Fix by ensuring one of the operands is u64 which will promote the other to u64 as well ensuring no overflow.
osv:CVE-2022-49404
Kernel
Fixed versions: 4.9.318, 4.14.283, 4.19.247, 5.4.198, 5.10.121, 5.15.46, 5.17.14, 5.18.3
Complete source record
{
"id": "fd150539879bb88bab0ebc3a66e8f1676cbd0a103105ce9a724b7a3dfc588e1f",
"url": "https://osv.dev/vulnerability/CVE-2022-49404",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "RDMA/hfi1: Fix potential integer multiplication overflow errors",
"summary": "In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of different types, an overflow is possible even when storing the result in a larger type. This is because the conversion is done after the multiplication. So arithmetic overflow and thus in incorrect value is possible. Correct an instance of this in the inter packet delay calculation. Fix by ensuring one of the operands is u64 which will promote the other to u64 as well ensuring no overflow.",
"evidence": "osv:CVE-2022-49404",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.9.318",
"evidence": "/affected/1/ranges"
},
{
"value": "4.14.283",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.247",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.198",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.121",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.46",
"evidence": "/affected/1/ranges"
},
{
"value": "5.17.14",
"evidence": "/affected/1/ranges"
},
{
"value": "5.18.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "CVE-2022-49404",
"aliases": [
"CVE-2022-49404"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "7724105686e718ac476a6ad3304fea2fbcfcffde"
},
{
"fixed": "252f4afd4557a2e7075f793a5c80fe6dd9e9ee4a"
},
{
"fixed": "a89cb7ddf6a89bab6012e19da38b7cdb26175c19"
},
{
"fixed": "79c164e61f818054cd6012e9035701840d895c51"
},
{
"fixed": "8858284dd74906fa00f04f0252c75df4893a7959"
},
{
"fixed": "31dca00d0cc9f4133320d72eb7e3720badc6d6e6"
},
{
"fixed": "3f09ec80f115d2875d747ed28adc1773037e0f8b"
},
{
"fixed": "06039d8afefdbac05bcea5f397188407eba2996d"
},
{
"fixed": "ef5ab2e48a5f9960e2352332b7cdb7064bb49032"
},
{
"fixed": "f93e91a0372c922c20d5bee260b0f43b4b8a1bee"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49404.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.3.0"
},
{
"fixed": "4.9.318"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.10.0"
},
{
"fixed": "4.14.283"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.247"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.198"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.121"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.46"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "5.17.14"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.18.0"
},
{
"fixed": "5.18.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49404.json"
}
}
],
"modified": "2026-10-28T02:30:23.363969785Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/06039d8afefdbac05bcea5f397188407eba2996d",
"https://git.kernel.org/stable/c/252f4afd4557a2e7075f793a5c80fe6dd9e9ee4a",
"https://git.kernel.org/stable/c/31dca00d0cc9f4133320d72eb7e3720badc6d6e6",
"https://git.kernel.org/stable/c/3f09ec80f115d2875d747ed28adc1773037e0f8b",
"https://git.kernel.org/stable/c/79c164e61f818054cd6012e9035701840d895c51",
"https://git.kernel.org/stable/c/8858284dd74906fa00f04f0252c75df4893a7959",
"https://git.kernel.org/stable/c/a89cb7ddf6a89bab6012e19da38b7cdb26175c19",
"https://git.kernel.org/stable/c/ef5ab2e48a5f9960e2352332b7cdb7064bb49032",
"https://git.kernel.org/stable/c/f93e91a0372c922c20d5bee260b0f43b4b8a1bee",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49404.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49404",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49404.json"
}
},
"related_cves": [
{
"value": "CVE-2022-49404",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 489417,
"published_at": "2025-02-26T02:12:30.123+00:00"
}