PT-2025-8596 · Linux+4 · Linux Kernel+4

Syzbot · Published 2022-11-15 · Updated 2025-04-14 · CVE-2022-49663

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2-syzkaller-00443-g8720bd951b8e

Description A bug has been identified in the Linux kernel, specifically in the skb tunnel check pmtu() function. The issue arises from an incorrect assumption about the mac header being set in ndo start xmit() paths. This bug was caught by recently added debug code and is associated with a warning in the skb mac header len function. The vulnerability is related to the geneve xmit skb function in drivers/net/geneve.c and the packet direct xmit function in net/packet/af packet.c.

Recommendations For Linux kernel versions prior to 5.19.0-rc2-syzkaller-00443-g8720bd951b8e, consider updating to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to the vulnerable geneve xmit skb function in drivers/net/geneve.c until a patch is available. Additionally, avoid using the packet direct xmit function in net/packet/af packet.c until the issue is resolved.

Exploit

Fix

Related Identifiers

CESA-2023_2951

CVE-2022-49663

RHSA-2022:8267

RHSA-2022_8267

RHSA-2023:2951

RHSA-2023_2951

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1329

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49663.json · Exploit
• https://ubuntu.com/security/CVE-2022-49663 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49663 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49663 · Security Note
• https://git.kernel.org/stable/c/59c51c3b545128a92ebfb6dbae990d3abee110e7 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/674a641e5b67e16ba3112eacd680ff87b38539de · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49663 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49663 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49663 · Security Note
• https://git.kernel.org/stable/c/32dcf62efa0003f92a976aea0c57f118e689de8b · Patch