5.5

CVE-2022-49048

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix panic when forwarding a pkt with no in6 dev

kongweibin reported a kernel panic in ip6_forward() when input interface
has no in6 dev associated.

The following tc commands were used to reproduce this panic:
tc qdisc del dev vxlan100 root
tc qdisc add dev vxlan100 root netem corrupt 5%
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login Login
Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.19.199 < 4.19.239
Linux ≫ Linux Kernel Version >= 5.4.136 < 5.4.190
Linux ≫ Linux Kernel Version >= 5.10.54 < 5.10.112
Linux ≫ Linux Kernel Version >= 5.13.6 < 5.14
Linux ≫ Linux Kernel Version >= 5.14.1 < 5.15.35
Linux ≫ Linux Kernel Version >= 5.16 < 5.17.4
Linux ≫ Linux Kernel Version5.14 Update-
Linux ≫ Linux Kernel Version5.14 Updaterc2
Linux ≫ Linux Kernel Version5.14 Updaterc3
Linux ≫ Linux Kernel Version5.14 Updaterc4
Linux ≫ Linux Kernel Version5.14 Updaterc5
Linux ≫ Linux Kernel Version5.14 Updaterc6
Linux ≫ Linux Kernel Version5.14 Updaterc7
Linux ≫ Linux Kernel Version5.18 Updaterc1
Linux ≫ Linux Kernel Version5.18 Updaterc2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.133
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H