PT-2022-7677 · Linux+4 · Linux Kernel+4
Syzbot
·
Published
2022-12-07
·
Updated
2025-11-18
·
CVE-2022-48956
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc6-syzkaller-00012-g4312098baf37
Description
The issue is related to a use-after-free vulnerability in the
ip6 fragment() function in the Linux kernel's IPv6 implementation. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability is caused by the reuse of previously freed memory, which can lead to unintended behavior. The ip6 fragment() function is called by various parts of the IPv6 stack, including the UDP stack. The vulnerability can be triggered by sending specially crafted IPv6 packets to a vulnerable system.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. As a temporary workaround, consider disabling the
ip6 fragment() function until a patch is available. Restrict access to the vulnerable net/ipv6/ip6 output.c module to minimize the risk of exploitation. Avoid using the ip6 dst idev variable in the affected API endpoint until the issue is resolved.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linux Kernel
Red Os
Suse