Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2022-49048

ipv6: fix panic when forwarding a pkt with no in6 dev

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.239, 5.4.190, 5.10.112, 5.14, 5.15.35, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel panic in ip6_forward() when input interface has no in6 dev associated. The following tc commands were used to reproduce this panic: tc qdisc del dev vxlan100 root tc qdisc add dev vxlan100 root netem corrupt 5%

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From bff0854e2f804f68d3e93d19e4580dbd69777e1d · fixed in 74b68f5249f16c5f7f675d0f604fa6ae20e3a151; From 7f4848229e91d508102b30396b8a1b710ac23637 · fixed in ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435; From 79ec7b5b2f4fe38e5c7459ed0bdff4ef3386ab63 · fixed in a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e; From ccd27f05ae7b8ebc40af5b004e94517a919aa862 · fixed in adee01bbf6cb5b3e4ed08be8ff866aac90f13836; From ccd27f05ae7b8ebc40af5b004e94517a919aa862 · fixed in e69fb3de87a8923e5931a272a38fa3cceb01da44; From ccd27f05ae7b8ebc40af5b004e94517a919aa862 · fixed in e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0; From 4.19.199 · fixed in 4.19.239; From 5.4.136 · fixed in 5.4.190; From 5.10.54 · fixed in 5.10.112; From 5.13.6 · fixed in 5.14

  • Linux Linux

    5.14

  • KernelLinux

    fixed in 4.19.239; From 4.20.0 · fixed in 5.4.190; From 5.5.0 · fixed in 5.10.112; From 5.11.0 · fixed in 5.15.35; From 5.14.0 · fixed in 5.17.4

References 6

git.kernel.org