CVE-2022-49048
published 2025-02-26CVE-2022-49048: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel panic in…
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.67%
48.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix panic when forwarding a pkt with no in6 dev
kongweibin reported a kernel panic in ip6_forward() when input interface
has no in6 dev associated.
The following tc commands were used to reproduce this panic:
tc qdisc del dev vxlan100 root
tc qdisc add dev vxlan100 root netem corrupt 5%
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.6-1 (bookworm) | linux 5.17.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.19.199 < 4.19.239 | 4.19.239 |
| linux | linux | >= 5.10.54 < 5.10.112 | 5.10.112 |
| linux | linux | >= 5.13.6 < 5.14 | 5.14 |
| linux | linux | >= 5.4.136 < 5.4.190 | 5.4.190 |
| linux | linux | >= 79ec7b5b2f4fe38e5c7459ed0bdff4ef3386ab63 < a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e | a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e |
| linux | linux | >= 7f4848229e91d508102b30396b8a1b710ac23637 < ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435 | ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435 |
| linux | linux | >= bff0854e2f804f68d3e93d19e4580dbd69777e1d < 74b68f5249f16c5f7f675d0f604fa6ae20e3a151 | 74b68f5249f16c5f7f675d0f604fa6ae20e3a151 |
| linux | linux | >= ccd27f05ae7b8ebc40af5b004e94517a919aa862 < adee01bbf6cb5b3e4ed08be8ff866aac90f13836 | adee01bbf6cb5b3e4ed08be8ff866aac90f13836 |
| linux | linux | >= ccd27f05ae7b8ebc40af5b004e94517a919aa862 < e69fb3de87a8923e5931a272a38fa3cceb01da44 | e69fb3de87a8923e5931a272a38fa3cceb01da44 |
| linux | linux | >= ccd27f05ae7b8ebc40af5b004e94517a919aa862 < e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0 | e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.6-1 | 5.17.6-1 |
| linux | linux_kernel | >= 0 < 5.17.6-1 | 5.17.6-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ipv6: fix panic when forwarding a pkt with no in6 dev
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49048 [MEDIUM] kernel: ipv6: fix panic when forwarding a pkt with no in6 dev
kernel: ipv6: fix panic when forwarding a pkt with no in6 dev
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix panic when forwarding a pkt with no in6 dev
kongweibin reported a kernel panic in ip6_forward() when input interface
has no in6 dev associated.
The following tc commands were used to reproduce this panic:
tc qdisc del dev vxlan100 root
tc qdisc add dev vxlan100 root netem corrupt 5%
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 8) - Out of support scope
Package: kernel-rt (Red Hat Enter
Debian
CVE-2022-49048: linux - In the Linux kernel, the following vulnerability has been resolved: ipv6: fix p...
vendor_debian·2022·CVSS 5.5
CVE-2022-49048 [MEDIUM] CVE-2022-49048: linux - In the Linux kernel, the following vulnerability has been resolved: ipv6: fix p...
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel panic in ip6_forward() when input interface has no in6 dev associated. The following tc commands were used to reproduce this panic: tc qdisc del dev vxlan100 root tc qdisc add dev vxlan100 root netem corrupt 5%
Scope: local
bookworm: resolved (fixed in 5.17.6-1)
bullseye: resolved (fixed in 5.10.113-1)
forky: resolved (fixed in 5.17.6-1)
sid: resolved (fixed in 5.17.6-1)
trixie: resolved (fixed in 5.17.6-1)
GHSA
GHSA-hv5h-q6gh-5q7w: In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix panic when forwarding a pkt with no in6 dev
kongweibin reported a kern
ghsa_unreviewed·2025-10-14
CVE-2022-49048 [MEDIUM] GHSA-hv5h-q6gh-5q7w: In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix panic when forwarding a pkt with no in6 dev
kongweibin reported a kern
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix panic when forwarding a pkt with no in6 dev
kongweibin reported a kernel panic in ip6_forward() when input interface
has no in6 dev associated.
The following tc commands were used to reproduce this panic:
tc qdisc del dev vxlan100 root
tc qdisc add dev vxlan100 root netem corrupt 5%
OSV
CVE-2022-49048: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel
osv·2025-02-26·CVSS 5.5
CVE-2022-49048 [MEDIUM] CVE-2022-49048: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel panic in ip6_forward() when input interface has no in6 dev associated. The following tc commands were used to reproduce this panic: tc qdisc del dev vxlan100 root tc qdisc add dev vxlan100 root netem corrupt 5%
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/74b68f5249f16c5f7f675d0f604fa6ae20e3a151https://git.kernel.org/stable/c/a263712ba8c9ded25dd9d2d5ced11bcea5b33a3ehttps://git.kernel.org/stable/c/ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435https://git.kernel.org/stable/c/adee01bbf6cb5b3e4ed08be8ff866aac90f13836https://git.kernel.org/stable/c/e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0https://git.kernel.org/stable/c/e69fb3de87a8923e5931a272a38fa3cceb01da44
2025-02-26
Published