PT-2025-18620 · Linux+3 · Linux Kernel+3

Published 2023-05-09 · Updated 2025-05-02 · CVE-2022-49903

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A warning in the ip6 route net exit late() function has been fixed. During the initialization of ip6 route net init late(), if the ipv6 route or rt6 stats file fails to be created, the initialization is successful by default. As a result, the ipv6 route or rt6 stats file is not found during removal in ip6 route net exit late(), causing a warning. The issue is related to the removal of proc entries in the fs/proc/generic.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CESA-2023_7077

CVE-2022-49903

RHSA-2023:2458

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_7077

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49903.json · Exploit
• https://git.kernel.org/stable/c/0ed71af4d017d2bd2cbb8f7254f613a4914def26 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49903 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49903 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49903 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49903 · Vendor Advisory
• https://git.kernel.org/stable/c/768b3c745fe5789f2430bdab02f35a9ad1148d97 · Patch
• https://git.kernel.org/stable/c/080589287127838046077904f34d5054ea0f895c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49903 · Security Note
• https://git.kernel.org/stable/c/381453770f731f0f43616a1cd4c759b7807a1517 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49903 · Security Note
• https://git.kernel.org/stable/c/83fbf246ced54dadd7b9adc2a16efeff30ba944d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49903 · Vendor Advisory
• https://git.kernel.org/stable/c/5dbb47ee89762da433cd8458788d7640c85f1a07 · Patch
• https://lore.kernel.org/linux-cve-announce/2025050102-CVE-2022-49903-23a6@gregkh/T · Note