CVE-2022-50397Kernel vulnerability

2 documents2 sources
Severity
N/A
No vector
EPSS
No EPSS data
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 18

Description

In the Linux kernel, the following vulnerability has been resolved: net/ieee802154: reject zero-sized raw_sendmsg() syzbot is hitting skb_assert_len() warning at raw_sendmsg() for ieee802154 socket. What commit dc633700f00f726e ("net/af_packet: check len when min_header_len equals to 0") does also applies to ieee802154 socket.

Affected Packages1 packages

Debianlinux/linux_kernel< 5.10.158-1+3

🔴Vulnerability Details

2
OSV
CVE-2022-50397: In the Linux kernel, the following vulnerability has been resolved: net/ieee802154: reject zero-sized raw_sendmsg() syzbot is hitting skb_assert_len()2025-09-18
GHSA
GHSA-5f9p-jqvh-27rv: In the Linux kernel, the following vulnerability has been resolved: net/ieee802154: reject zero-sized raw_sendmsg() syzbot is hitting skb_assert_len2025-09-18
CVE-2022-50397 — Linux Kernel vulnerability | cvebase