CVE-2022-49280

In the Linux kernel, the following vulnerability has been resolved:

NFSD: prevent underflow in nfssvc_decode_writeargs()

Smatch complains:

fs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs()
warn: no lower bound on 'args->len'

Change the type to unsigned to prevent this issue.

Red Hat has evaluated this vulnerability as having a Moderate impact because it requires an active NFS server instance processing legacy NFSv2 write requests, limiting the potential blast radius primarily to a denial of service. By default, the kernel NFS server is not running on standard Red Hat Enterprise Linux installations, and support for NFSv2 is disabled by default on modern enterprise platforms. Systems that do not act as NFS servers or that exclusively serve NFSv3 and NFSv4 clients are not affected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.