What is CVE-2022-49387?

CVE-2022-49387 is a medium-severity vulnerability in Linux, classified under Integer Overflow or Wraparound. CVSS score: 5.5/10. Published 2025-02-26.

How severe is CVE-2022-49387?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Integer overflow in Linux

CVE-2022-49387

In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 32bit overflow issue The value of timer_cycle_us can be 0 due to 32bit overflow. For eg:- If we assign the counter value "0xfff" for computing maxval. This patch fixes this issue by appending ULL to 1024, so that it is promoted to 64bit. This patch also fixes the warning message, 'watchdog: Invalid min and max timeout values, resetting to 0!'.

Vulnerability class: Integer Overflow

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions 2cbc5cd0b55fa2310cc557c77b0665f5e00272de, 5.17, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2022-49387?: CVE-2022-49387 is a medium-severity vulnerability in Linux, classified under Integer Overflow or Wraparound. CVSS score: 5.5/10. Published 2025-02-26.
How severe is CVE-2022-49387?: Medium severity. CVSS v3 base score is 5.5 out of 10.