In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix list protocols enumeration in the base protocol

While enumerating protocols implemented by the SCMI platform using
BASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is
currently validated in an improper way since the check employs a sum
between unsigned integers that could overflow and cause the check itself
to be silently bypassed if the returned value 'loop_num_ret' is big
enough.

Fix the validation avoiding the addition.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
b6f20ff8bd94ad34032804a60bab5ee56752007e affected
< 444a2d27fe9867d0da4b28fc45b793f32e099ab8
b6f20ff8bd94ad34032804a60bab5ee56752007e affected
< b0e4bafac8963c2d85ee18d3d01f393735acceec
b6f20ff8bd94ad34032804a60bab5ee56752007e affected
< 1052f22e127d0c34c3387bb389424ba1c61491ff
b6f20ff8bd94ad34032804a60bab5ee56752007e affected
< 98342148a8cd242855d7e257f298c966c96dba9f
b6f20ff8bd94ad34032804a60bab5ee56752007e affected
< 6e7978695f4a6cbd83616b5a702b77fa2087b247
b6f20ff8bd94ad34032804a60bab5ee56752007e affected
< 2ccfcd7a09c826516edcfe464b05071961aada3f
b6f20ff8bd94ad34032804a60bab5ee56752007e affected
< 8009120e0354a67068e920eb10dce532391361d0
Linux Linux affected
Version Status Constraints
4.17 affected
—
0 unaffected
< 4.17
4.19.247 unaffected
≤ 4.19.*
5.4.198 unaffected
≤ 5.4.*
5.10.121 unaffected
≤ 5.10.*
5.15.46 unaffected
≤ 5.15.*
5.17.14 unaffected
≤ 5.17.*
5.18.3 unaffected
≤ 5.18.*
5.19 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-162.6.1.el9_1 cpe:/a:redhat:enterprise_linux:9 RHSA-2022:8267 2022-11-15T00:00:00Z
kernel-0:5.14.0-284.11.1.el9_2 cpe:/a:redhat:enterprise_linux:9 RHSA-2023:2458 2023-05-09T00:00:00Z
kernel-0:5.14.0-162.6.1.el9_1 cpe:/o:redhat:enterprise_linux:9 RHSA-2022:8267 2022-11-15T00:00:00Z
kernel-0:5.14.0-284.11.1.el9_2 cpe:/o:redhat:enterprise_linux:9 RHSA-2023:2458 2023-05-09T00:00:00Z

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-54778 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is currently validated in an improper way since the check employs a sum between unsigned integers that could overflow and cause the check itself to be silently bypassed if the returned value 'loop_num_ret' is big enough. Fix the validation avoiding the addition.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1052f22e127d0c34c3387bb389424ba1c61491ff cve-icon cve-icon
https://git.kernel.org/stable/c/2ccfcd7a09c826516edcfe464b05071961aada3f cve-icon cve-icon
https://git.kernel.org/stable/c/444a2d27fe9867d0da4b28fc45b793f32e099ab8 cve-icon cve-icon
https://git.kernel.org/stable/c/6e7978695f4a6cbd83616b5a702b77fa2087b247 cve-icon cve-icon
https://git.kernel.org/stable/c/8009120e0354a67068e920eb10dce532391361d0 cve-icon cve-icon
https://git.kernel.org/stable/c/98342148a8cd242855d7e257f298c966c96dba9f cve-icon cve-icon
https://git.kernel.org/stable/c/b0e4bafac8963c2d85ee18d3d01f393735acceec cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022659-CVE-2022-49451-5d2f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49451 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49451 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 25 Apr 2025 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Mon, 17 Mar 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-190
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Fri, 28 Feb 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is currently validated in an improper way since the check employs a sum between unsigned integers that could overflow and cause the check itself to be silently bypassed if the returned value 'loop_num_ret' is big enough. Fix the validation avoiding the addition.
Title firmware: arm_scmi: Fix list protocols enumeration in the base protocol
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-01T19:46:48.095Z

Reserved: 2025-02-26T02:08:31.572Z

Link: CVE-2022-49451

cve-icon Vulnrichment

Updated: 2025-10-01T16:47:23.911Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:01:21.490

Modified: 2025-10-01T20:16:21.027

Link: CVE-2022-49451

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49451 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses