CVE-2022-49952

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: fix memory corruption on probe

Add the missing sanity check on the probed-session count to avoid corrupting memory beyond the fixed-size slab-allocated session array when there are more than FASTRPC_MAX_SESSIONS sessions defined in the devicetree.

This vulnerability does not affect supported Red Hat Enterprise Linux distributions as the vulnerable Qualcomm FastRPC driver code is not present in shipped kernel builds. The issue relies on devicetree configurations declaring more sessions than supported by the driver, which is specific to certain Qualcomm hardware architectures and outside typical enterprise deployments. Consequently, Red Hat products do not expose this flaw.