PT-2025-7994 · Linux+5 · Linux Kernel+5

Guillaume Nault · Published 2022-04-06 · Updated 2025-09-29 · CVE-2022-49066

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue occurs when a decapsulated packet is fed to a veth device with act mirred, and skb headlen() may be 0. However, veth xmit() calls dev forward skb(), which expects at least ETH HLEN byte of linear data. To fix this, pskb may pull() is used to ensure veth xmit() respects this constraint. The vulnerability can cause a kernel bug, leading to a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-388

Related Identifiers

ALSA-2025_16880

BDU:2025-06015

CESA-2022_7683

CVE-2022-49066

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 1489

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49066.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49066 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49066 · Vendor Advisory
• https://git.kernel.org/stable/c/3de2a02b60a4ef0ab76263216f08c7d095fc7c42 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49066 · Security Note
• https://git.kernel.org/stable/c/d67c900f1947d64ba8a64f693504bcaab8d9000c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49066 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/1ef0088e43af1de4e3b365218c4d3179d9a37eec · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/46bc359fec0c6d87b70d7a008bcd9a5e30dd6f27 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49066 · Vendor Advisory
• https://git.kernel.org/stable/c/726e2c5929de841fdcef4e2bf995680688ae1b87 · Patch
• https://ubuntu.com/security/CVE-2022-49066 · Vendor Advisory