CVE-2022-50817 — NULL Pointer Dereference in Linux
Severity
6.2MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
net: hsr: avoid possible NULL deref in skb_clone()
syzbot got a crash [1] in skb_clone(), caused by a bug
in hsr_get_untagged_frame().
When/if create_stripped_skb_hsr() returns NULL, we must
not attempt to call skb_clone().
While we are at it, replace a WARN_ONCE() by netdev_warn_once().
[1]
general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in …
Affected Packages4 packages
▶CVEListV5linux/linuxf266a683a4804dc499efc6c2206ef68efed029d0 — ff7ba766758313129794f150bbc4d351b5e17a53+4
🔴Vulnerability Details
3GHSA▶
GHSA-wv4w-6f2g-7mq7: In the Linux kernel, the following vulnerability has been resolved:
net: hsr: avoid possible NULL deref in skb_clone()
syzbot got a crash [1] in skb↗2025-12-30
OSV▶
CVE-2022-50817: In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skb_clone() syzbot got a crash [1] in skb_c↗2025-12-30