PT-2024-11862 · Linux+4 · Linux Kernel+4
Gwangun Jung
·
Published
2022-10-07
·
Updated
2025-09-29
·
CVE-2022-48999
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.0-rc7
Description
A slab-out-of-bounds access was reported in the
fib nh match function. The issue occurs when attempting to delete a multipath route while the fib info contains an nh reference. Separate nexthop objects are mutually exclusive with the legacy multipath spec. The fib nh match function has been fixed to return if the config for the to-be-deleted route contains a multipath spec while the fib info is using a nexthop object.Recommendations
For Linux kernel versions prior to 6.0-rc7, update to a version that includes the fix for the
fib nh match function to prevent slab-out-of-bounds access. As a temporary workaround, consider restricting the use of multipath routes with nexthop objects to minimize the risk of exploitation.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linux Kernel
Red Os
Suse