01 Record

CVE-2022-48630

crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.23% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 13.7% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-03-05 11:18Z2 YR AGO

Last updated

2026-05-23 15:20Z3 MO AGO

Reserved

2024-02-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')Base

Data version

5.2

Document digest

d7f7168da49e97667e074ff6031a563343d5029a26638b5e5696093d7cadf90d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa8e32bbb96c25b7ab29b1894dcd45e0b3b08fd9d to < 71a89789552b7faf3ef27969b9bc783fa0df3550, 184f7bd08ce56f003530fc19f160d54e75bf5c9d to < 8be06f62b426801dba43ddf8893952a0e62ab6ae, 0f9b7b8df17525e464294c916acc8194ce38446b to < 233a3cc60e7a8fe0be8cf9934ae7b67ba25a866c, ab9337c7cb6f875b6286440b1adfbeeef2b2b2bd to < 8a06f25f5941c145773204f2f7abef95b4ffb8ce, a680b1832ced3b5fa7c93484248fd221ea0d614b to < 05d4d17475d8d094c519bb51658bc47899c175e3, a680b1832ced3b5fa7c93484248fd221ea0d614b to < 16287397ec5c08aa58db6acf7dbc55470d78087d, 485995cbc98a4f77cfd4f8ed4dd7ff8ab262964d, 4.19.236 to < 4.19.245, 5.4.187 to < 5.4.196, 5.10.108 to < 5.10.118, 5.15.31 to < 5.15.42, 5.16.17 to < 5.17, 5.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/71a89789552b7faf3ef27969b9bc783fa0df3550
git.kernel.orghttps://git.kernel.org/stable/c/8be06f62b426801dba43ddf8893952a0e62ab6ae
git.kernel.orghttps://git.kernel.org/stable/c/233a3cc60e7a8fe0be8cf9934ae7b67ba25a866c
git.kernel.orghttps://git.kernel.org/stable/c/8a06f25f5941c145773204f2f7abef95b4ffb8ce
git.kernel.orghttps://git.kernel.org/stable/c/05d4d17475d8d094c519bb51658bc47899c175e3
git.kernel.orghttps://git.kernel.org/stable/c/16287397ec5c08aa58db6acf7dbc55470d78087d

01 Record index

CVE-2022-48630

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2022-48630

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References