PT-2025-18589 · Linux+4 · Linux Kernel+4

Published 2023-05-09 · Updated 2025-06-17 · CVE-2022-49872

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the net: gso module. The issue occurs when the gso size of a GRO packet is changed, and the frag list contains skbs with mixed head allocation types. This can lead to a panic in skb segment when the vmxnet3 driver is used. The problem arises because netdev alloc skb and napi alloc skb can return skbs that are either page-backed or kmalloced, depending on the requested size. As a result, the last small skb in the GRO packet can be kmalloced. The vulnerability can be exploited when the NETIF F SG flag is set, and the gso size is modified.

Recommendations To resolve the issue, apply the patch that implements the fix by walking the frag list in skb segment when determining whether NETIF F SG should be cleared. This fix is applied only for skbs with SKB GSO DODGY set and gso size changed, to limit the performance impact. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CESA-2023_2951

CVE-2022-49872

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:01983-1

SUSE-SU-2025_01983-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 374

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49872.json · Exploit
• https://git.kernel.org/stable/c/0a9f56e525ea871d3950b90076912f5c7494f00f · Patch
• https://git.kernel.org/stable/c/598d9e30927b15731e83797fbd700ecf399f42dd · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49872 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49872 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49872 · Vendor Advisory
• https://git.kernel.org/stable/c/9e4b7a99a03aefd37ba7bb1f022c8efab5019165 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49872 · Vendor Advisory
• https://git.kernel.org/stable/c/50868de7dc4e7f0fcadd6029f32bf4387c102ee6 · Patch
• https://git.kernel.org/stable/c/65ad047fd83502447269fda8fd26c99077a9af47 · Patch
• https://git.kernel.org/stable/c/5876b7f249a1ecbbcc8e35072c3828d6526d1c3a · Patch
• https://git.kernel.org/stable/c/ad25a115f50800c6847e0d841c5c7992a9f7c1b3 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49872 · Security Note
• https://git.kernel.org/stable/c/bd5362e58721e4d0d1a37796593bd6e51536ce7a · Patch