CVE-2022-49356

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Trap RDMA segment overflows

Prevent svc_rdma_build_writes() from walking off the end of a Write chunk's segment array. Caught with KASAN.

The test that this fix replaces is invalid, and might have been left over from an earlier prototype of the PCL work.

This vulnerability is rated as a Moderate impact because exploitation is limited to a system crash (denial of service) and depends on the use of RPC-over-RDMA, an uncommon protocol transport that is not enabled by default. In standard Red Hat Enterprise Linux deployments, SUNRPC operates over TCP or UDP and does not load RDMA transport modules without specialized RDMA hardware and explicit configuration. Consequently, environments that do not configure NFS over RDMA or similar kernel-level RDMA services remain unaffected by this flaw during typical network operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.