CVE-2022-49950

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: fix memory corruption on open

The probe session-duplication overflow check incremented the session count also when there were no more available sessions so that memory beyond the fixed-size slab-allocated session array could be corrupted in fastrpc_session_alloc() on open().

Red Hat Enterprise Linux and other Red Hat offerings are not affected by this vulnerability, as the Qualcomm FastRPC driver is not enabled in supported kernel configurations. The flaw presents a local risk exclusively on systems with hardware and kernel builds supporting this subsystem, where an unprivileged local user opening device sessions could trigger memory corruption. Consequently, there is no security exposure for standard Red Hat environments.