CVE-2022-48999
published 2024-10-21CVE-2022-48999: In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference…
PriorityP429high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.26%
17.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match:
fib_nh_match+0xf98/0x1130 linux-6.0-rc7/net/ipv4/fib_semantics.c:961
fib_table_delete+0x5f3/0xa40 linux-6.0-rc7/net/ipv4/fib_trie.c:1753
inet_rtm_delroute+0x2b3/0x380 linux-6.0-rc7/net/ipv4/fib_frontend.c:874
Separate nexthop objects are mutually exclusive with the legacy
multipath spec. Fix fib_nh_match to return if the config for the
to be deleted route contains a multipath spec while the fib_info
is using a nexthop object.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.12-1 (bookworm) | linux 6.0.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 493ced1ac47c48bb86d9d4e8e87df8592be85a0e < cc3cd130ecfb8b0ae52e235e487bae3f16a24a32 | cc3cd130ecfb8b0ae52e235e487bae3f16a24a32 |
| linux | linux | >= 493ced1ac47c48bb86d9d4e8e87df8592be85a0e < 0b5394229ebae09afc07aabccb5ffd705ffd250e | 0b5394229ebae09afc07aabccb5ffd705ffd250e |
| linux | linux | >= 493ced1ac47c48bb86d9d4e8e87df8592be85a0e < 25174d91e4a32a24204060d283bd5fa6d0ddf133 | 25174d91e4a32a24204060d283bd5fa6d0ddf133 |
| linux | linux | >= 493ced1ac47c48bb86d9d4e8e87df8592be85a0e < bb20a2ae241be846bc3c11ea4b3a3c69e41d51f2 | bb20a2ae241be846bc3c11ea4b3a3c69e41d51f2 |
| linux | linux | >= 493ced1ac47c48bb86d9d4e8e87df8592be85a0e < 61b91eb33a69c3be11b259c5ea484505cd79f883 | 61b91eb33a69c3be11b259c5ea484505cd79f883 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 5.11 < 5.15.82 | 5.15.82 |
| linux | linux_kernel | >= 5.16 < 6.0.12 | 6.0.12 |
| linux | linux_kernel | >= 5.3 < 5.4.226 | 5.4.226 |
| linux | linux_kernel | >= 5.5 < 5.10.158 | 5.10.158 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
vendor_redhat·2024-10-21·CVSS 7.1
CVE-2022-48999 [HIGH] CWE-125 kernel: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
kernel: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match:
fib_nh_match+0xf98/0x1130 linux-6.0-rc7/net/ipv4/fib_semantics.c:961
fib_table_delete+0x5f3/0xa40 linux-6.0-rc7/net/ipv4/fib_trie.c:1753
inet_rtm_delroute+0x2b3/0x380 linux-6.0-rc7/net/ipv4/fib_frontend.c:874
Separate nexthop objects are mutually exclusive with the legacy
multipath spec. Fix fib_nh_match to return if the config for the
to be deleted route contains a multipath spec while the fib_info
is using a nexthop object.
An out-of-bounds memory access vulnerability was foun
Debian
CVE-2022-48999: linux - In the Linux kernel, the following vulnerability has been resolved: ipv4: Handl...
vendor_debian·2022·CVSS 7.1
CVE-2022-48999 [HIGH] CVE-2022-48999: linux - In the Linux kernel, the following vulnerability has been resolved: ipv4: Handl...
In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match: fib_nh_match+0xf98/0x1130 linux-6.0-rc7/net/ipv4/fib_semantics.c:961 fib_table_delete+0x5f3/0xa40 linux-6.0-rc7/net/ipv4/fib_trie.c:1753 inet_rtm_delroute+0x2b3/0x380 linux-6.0-rc7/net/ipv4/fib_frontend.c:874 Separate nexthop objects are mutually exclusive with the legacy multipath spec. Fix fib_nh_match to return if the config for the to be deleted route contains a multipath spec while the fib_info is using a nexthop object.
Scope: local
bookworm: resolved (fixed in 6.0.12-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.12-1)
sid: resolved (fixed
OSV
CVE-2022-48999: In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh refere
osv·2024-10-21·CVSS 7.1
CVE-2022-48999 [HIGH] CVE-2022-48999: In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh refere
In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match: fib_nh_match+0xf98/0x1130 linux-6.0-rc7/net/ipv4/fib_semantics.c:961 fib_table_delete+0x5f3/0xa40 linux-6.0-rc7/net/ipv4/fib_trie.c:1753 inet_rtm_delroute+0x2b3/0x380 linux-6.0-rc7/net/ipv4/fib_frontend.c:874 Separate nexthop objects are mutually exclusive with the legacy multipath spec. Fix fib_nh_match to return if the config for the to be deleted route contains a multipath spec while the fib_info is using a nexthop object.
GHSA
GHSA-6m34-xwq2-mrch: In the Linux kernel, the following vulnerability has been resolved:
ipv4: Handle attempt to delete multipath route when fib_info contains an nh refer
ghsa_unreviewed·2024-10-21
CVE-2022-48999 [HIGH] CWE-125 GHSA-6m34-xwq2-mrch: In the Linux kernel, the following vulnerability has been resolved:
ipv4: Handle attempt to delete multipath route when fib_info contains an nh refer
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
Gwangun Jung reported a slab-out-of-bounds access in fib_nh_match:
fib_nh_match+0xf98/0x1130 linux-6.0-rc7/net/ipv4/fib_semantics.c:961
fib_table_delete+0x5f3/0xa40 linux-6.0-rc7/net/ipv4/fib_trie.c:1753
inet_rtm_delroute+0x2b3/0x380 linux-6.0-rc7/net/ipv4/fib_frontend.c:874
Separate nexthop objects are mutually exclusive with the legacy
multipath spec. Fix fib_nh_match to return if the config for the
to be deleted route contains a multipath spec while the fib_info
is using a nexthop object.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/0b5394229ebae09afc07aabccb5ffd705ffd250ehttps://git.kernel.org/stable/c/25174d91e4a32a24204060d283bd5fa6d0ddf133https://git.kernel.org/stable/c/61b91eb33a69c3be11b259c5ea484505cd79f883https://git.kernel.org/stable/c/bb20a2ae241be846bc3c11ea4b3a3c69e41d51f2https://git.kernel.org/stable/c/cc3cd130ecfb8b0ae52e235e487bae3f16a24a32
2024-10-21
Published