CVE-2022-49199

In the Linux kernel, the following vulnerability has been resolved:

RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()

This code checks "index" for an upper bound but it does not check for negatives. Change the type to unsigned to prevent underflows.

The bug could happen only if RDMA being used (that is Remote Direct Memory Access). The security impact is limited, because it is integer underflow bug that does not lead to an actual kernel panic or other fail. It can lead to incorrect behavior of RDMA (for example to incorrect statistics counters value or similar).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module ib_core from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.