PT-2025-8587 · Linux+2 · Linux Kernel+2

Christian Marangi · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49654

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel was discovered related to changing the MAX FRAME SIZE of a switch. If the MAX FRAME SIZE is changed while the cpu port is on, the switch panics and stops sending packets, making the device unreachable. This requires a switch reset to recover. The issue is due to a lack of documentation on how to correctly change the MAX FRAME SIZE.

Recommendations To correctly handle this issue, turn off the cpu ports before changing the MAX FRAME SIZE and turn them on again after the value is applied.

Exploit

Fix

Related Identifiers

CVE-2022-49654

Affected Products

Astra Linux

Debian

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49654.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-49654 · Security Note
• https://git.kernel.org/stable/c/1993f5a06736ada59dd54b50dc96755a38796ee5 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49654 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49654 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49654 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49654 · Vendor Advisory
• https://git.kernel.org/stable/c/188c798f3c2554fa0d7147e9b97baf144b817019 · Patch
• https://ubuntu.com/security/CVE-2022-49654 · Vendor Advisory
• https://git.kernel.org/stable/c/386228c694bf1e7a7688e44412cb33500b0ac585 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49654 · Vendor Advisory
• https://twitter.com/CVEnew/status/1894592873711951999 · Twitter Post
• https://git.kernel.org/linus/386228c694bf1e7a7688e44412cb33500b0ac585 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note