PT-2024-11878 · Linux · Linux Kernel

Matthieu Baerts · Published 2022-11-28 · Updated 2024-10-24 · CVE-2022-49018

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc5

Description A bug in the Linux kernel has been resolved, specifically in the mptcp protocol. The issue occurred when a sleeping function was called from an invalid context at close time, resulting in a splat. The problem was caused by calling mptcp close under the 'fast' socket lock variant, which has been replaced with sock lock nested() to fix the issue. The mptcp close function is called when the msk socket is closed, and it is related to the mptcp close ssk and mptcp subflow queue clean functions.

Recommendations To resolve the issue, update the Linux kernel to a version newer than 6.1.0-rc5. As a temporary workaround, consider disabling the mptcp close function until a patch is available. Restrict access to the mptcp protocol to minimize the risk of exploitation.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-460

CWE-667

Related Identifiers

BDU:2025-04350

CVE-2022-49018

Affected Products

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49018.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49018 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49018 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49018 · Vendor Advisory
• https://git.kernel.org/stable/c/b4f166651d03b5484fa179817ba8ad4899a5a6ac · Patch
• https://git.kernel.org/stable/c/d8e6c5500dbf0f3e87aace90d4beba6ae928e866 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49018 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49018 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49018 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04350 · Security Note
• https://git.kernel.org/linus/b4f166651d03b5484fa179817ba8ad4899a5a6ac · Note
• https://lore.kernel.org/linux-cve-announce/2024102153-CVE-2022-49018-7ee3@gregkh · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.12 · Note