CVE-2022-49952: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability (CVE-2022-49952) was identified in the fastrpc subsystem. The issue involves missing sanity checks on the probed-session count, which could lead to memory corruption beyond the fixed-size slab-allocated session array when there are more than FASTRPCMAXSESSIONS sessions defined in the devicetree (NVD, Wiz).

The vulnerability exists in the Linux kernel's fastrpc subsystem where insufficient validation of probed-session counts could result in memory corruption. Specifically, when the number of sessions defined in the devicetree exceeds FASTRPCMAXSESSIONS, the system fails to properly validate this condition, potentially leading to memory corruption beyond the allocated session array boundaries (NVD, Wiz).

The vulnerability could result in memory corruption, which may lead to system instability or potential security implications when exploited. The impact is particularly concerning as it affects the kernel level operations (Wiz).

The vulnerability has been resolved through the addition of proper sanity checks on the probed-session count. The fix prevents memory corruption by validating the session count against FASTRPCMAXSESSIONS before allocation (Wiz).