Not yet scoredPublished Dec 24, 2025

CVE-2022-50749acct: fix potential integer overflow in encode_comp_t()

Updated under an hour ago (Oct 27, 2026, 11:00 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: acct: fix potential integer overflow in encode_comp_t() The integer overflow is descripted with following codes: > 317 static comp_t encode_comp_t(u64 value) > 318 { > 319 int exp, rnd; ...... > 341 exp <<= MANTSIZE; > 342 exp += value; > 343 return exp; > 344 } Currently comp_t is defined as type of '__u16', but the variable 'exp' is type of 'int', so overflow would happen when variable 'exp' in line 343 is greater than 65535.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e93f995a591c352d35d89c518c54f790e1537754; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cf60bbca1b83a7e0927e36dbf178328982927886; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1750a0983c455a9b3badd848471fc8d58cb61f67; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a815a3e019456c94b03bd183e7ac22fd29e9e6fd; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6edd0cdee5780fd5f43356b72b29a2a6d48ef6da; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ebe16676e1dcaa4556ec4d36ca40c82e99e88cfa; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2224897d8187dc22a83e05d9361efcccf67bcf12; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 0aac6e60c464a5f942f995428e67f8ae1c422250; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/e93f995a591c352d35d89c518c54f790e1537754
https://git.kernel.org/stable/c/cf60bbca1b83a7e0927e36dbf178328982927886
https://git.kernel.org/stable/c/1750a0983c455a9b3badd848471fc8d58cb61f67
https://git.kernel.org/stable/c/a815a3e019456c94b03bd183e7ac22fd29e9e6fd
https://git.kernel.org/stable/c/6edd0cdee5780fd5f43356b72b29a2a6d48ef6da
https://git.kernel.org/stable/c/ebe16676e1dcaa4556ec4d36ca40c82e99e88cfa
https://git.kernel.org/stable/c/2224897d8187dc22a83e05d9361efcccf67bcf12
https://git.kernel.org/stable/c/0aac6e60c464a5f942f995428e67f8ae1c422250
https://git.kernel.org/stable/c/c5f31c655bcc01b6da53b836ac951c1556245305

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.