CVE-2022-49975

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49975
In the Linux kernel, the following vulnerability has been resolved: bpf: Don't redirect packets with invalid pkt_len Syzbot found an issue [1]: fq_codel_drop() try to drop a flow whitout any skbs, that is, the flow->head is null. The root cause, as the [2] says, is because that bpf_prog_test_run_skb() run a bpf prog which redirects empty skbs. So we should determine whether the length of the packet modified by bpf prog or others like bpf_prog_test is valid before forwarding it directly.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6204bf78b2a903b96ba43afff6abc0b04d6e0462 Patch
https://git.kernel.org/stable/c/72f2dc8993f10262092745a88cb2dd0fef094f23 Patch
https://git.kernel.org/stable/c/8b68e53d56697a59b5c53893b53f508bbdf272a0 Patch
https://git.kernel.org/stable/c/a75987714bd2d8e59840667a28e15c1fa5c47554 Patch
https://git.kernel.org/stable/c/fd1894224407c484f652ad456e1ce423e89bb3eb Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Nov 2025, 21:28

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: No redirigir paquetes con pkt_len no válidos. Syzbot encontró un problema [1]: fq_codel_drop() intenta descartar un flujo sin skbs, es decir, el flujo->head es nulo. La causa principal, como se indica en [2], es que bpf_prog_test_run_skb() ejecuta un programa bpf que redirige skbs vacíos. Por lo tanto, debemos determinar si la longitud del paquete modificado por el programa bpf u otros como bpf_prog_test es válida antes de reenviarlo directamente.
References () https://git.kernel.org/stable/c/6204bf78b2a903b96ba43afff6abc0b04d6e0462 - () https://git.kernel.org/stable/c/6204bf78b2a903b96ba43afff6abc0b04d6e0462 - Patch
References () https://git.kernel.org/stable/c/72f2dc8993f10262092745a88cb2dd0fef094f23 - () https://git.kernel.org/stable/c/72f2dc8993f10262092745a88cb2dd0fef094f23 - Patch
References () https://git.kernel.org/stable/c/8b68e53d56697a59b5c53893b53f508bbdf272a0 - () https://git.kernel.org/stable/c/8b68e53d56697a59b5c53893b53f508bbdf272a0 - Patch
References () https://git.kernel.org/stable/c/a75987714bd2d8e59840667a28e15c1fa5c47554 - () https://git.kernel.org/stable/c/a75987714bd2d8e59840667a28e15c1fa5c47554 - Patch
References () https://git.kernel.org/stable/c/fd1894224407c484f652ad456e1ce423e89bb3eb - () https://git.kernel.org/stable/c/fd1894224407c484f652ad456e1ce423e89bb3eb - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 21:28

NVD link : CVE-2022-49975

Mitre link : CVE-2022-49975

CVE.ORG link : CVE-2022-49975

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo