PT-2025-8264 · Linux+4 · Linux Kernel+4
Syzbot
·
Published
2022-05-27
·
Updated
2025-04-16
·
CVE-2022-49330
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the version that includes the fix for the issue described.
Description
A bug in the Linux kernel's TCP implementation could lead to potential zero-divides due to the
tcp snd cwnd value being reduced after an MTU probe has started but before it succeeds. This issue was identified through a report from syzbot, which pointed to an old bug introduced in the initial support for MTU probing. The bug is related to the tcp mtu probe function and its checks for starting an MTU probe based on the tcp snd cwnd value. Debugging efforts, including the addition of accessors to read and set tp->snd cwnd, have helped in addressing this issue. Additionally, potential overflows in the related code have been addressed.Recommendations
For Linux kernel versions prior to the fixed version, consider applying the patch that fixes the
tcp mtup probe success function to prevent potential zero-divides and overflows. As a temporary workaround, consider restricting the use of MTU probing in TCP connections until a patched version of the kernel is available.Exploit
Fix
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse