PT-2025-7976 · Linux+1 · Linux Kernel+1

Kongweibin · Published 2022-04-11 · Updated 2025-10-14 · CVE-2022-49048

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel panic issue has been identified in the Linux kernel when forwarding a packet with no associated in6 device. This issue was reported by kongweibin and occurs in the ip6 forward() function. The problem can be reproduced using specific tc commands, including tc qdisc del dev vxlan100 root and tc qdisc add dev vxlan100 root netem corrupt 5%, which demonstrate the panic when the input interface has no in6 device associated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-04073

CVE-2022-49048

Affected Products

Astra Linux

Linux Kernel

References · 26

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49048.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49048 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49048 · Vendor Advisory
• https://git.kernel.org/stable/c/e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0 · Patch
• https://osv.dev/vulnerability/CVE-2022-49048 · Vendor Advisory
• https://git.kernel.org/stable/c/ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435 · Patch
• https://git.kernel.org/stable/c/adee01bbf6cb5b3e4ed08be8ff866aac90f13836 · Patch
• https://git.kernel.org/stable/c/74b68f5249f16c5f7f675d0f604fa6ae20e3a151 · Patch
• https://ubuntu.com/security/CVE-2022-49048 · Vendor Advisory
• https://git.kernel.org/stable/c/e69fb3de87a8923e5931a272a38fa3cceb01da44 · Patch
• https://git.kernel.org/stable/c/a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49048 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04073 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49048 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49048 · Security Note