CVE-2022-49643: ima: Fix a potential integer overflow in ima_appraise_measurement
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in imaappraisemeasurement
When the ima-modsig is enabled, the rc passed to evmverifyxattr() may be negative, which may cause the integer overflow problem.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49643?
The severity of CVE-2022-49643 is medium due to potential integer overflow issues.
How do I fix CVE-2022-49643?
To fix CVE-2022-49643, you should update your Linux kernel to a version that includes the patch.
What systems are affected by CVE-2022-49643?
CVE-2022-49643 affects various versions of the Linux kernel, specifically between versions 5.4 to 5.19-rc6.
What are the potential impacts of CVE-2022-49643?
The potential impacts of CVE-2022-49643 include system instability and vulnerability to exploitation via the ima-modsig feature.
Is there a workaround for CVE-2022-49643?
Disabling the ima-modsig feature can serve as a temporary workaround for CVE-2022-49643 until the kernel is updated.