CVE-2022-50749

An integer overflow flaw was found in the Linux kernel's process accounting subsystem. In the encode_comp_t() function, the variable 'exp' is declared as an int but is returned as comp_t (a __u16). When the computed value exceeds 65535, the return value wraps around, resulting in incorrect process accounting data being recorded.

This flaw affects the accuracy of process accounting data when resource usage values are very large. The integer overflow causes incorrect values to be recorded in accounting files but does not cause a kernel crash or provide any exploitable security impact. Process accounting is an optional feature not enabled by default on most systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.