PT-2025-8624 · Linux+3 · Linux Kernel+3

Syzbot · Published 2022-06-20 · Updated 2025-02-27 · CVE-2022-49691

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2-syzkaller-00160-g274295c6e53f

Description A vulnerability has been resolved in the Linux kernel. The issue is related to the erspan module, where it was assumed that the transport header is always set. This assumption has been removed, and tests have been rewritten in ip6erspan tunnel xmit() and erspan fb xmit() to not make this assumption. The vulnerability was reported by syzbot, which triggered a warning in the kernel.

Recommendations For Linux kernel versions prior to 5.19.0-rc2-syzkaller-00160-g274295c6e53f, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the erspan module until a patch is available. Restrict access to the vulnerable ip6erspan tunnel xmit() and erspan fb xmit() functions to minimize the risk of exploitation. Avoid using the affected API endpoints until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-03707

CESA-2023_2951

CVE-2022-49691

RHSA-2022:8267

RHSA-2022_8267

RHSA-2023:2951

RHSA-2023_2951

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 26

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49691.json · Exploit
• https://git.kernel.org/stable/c/02da602bc2f353dccd9e489a604490034ded941e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49691 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03707 · Security Note
• https://git.kernel.org/stable/c/fb401f37f6eadf24956d93687e5758c163c0d12b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49691 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49691 · Vendor Advisory
• https://git.kernel.org/stable/c/2c8aeffc7c586d53e1d380f010bdca4f710f2480 · Patch
• https://git.kernel.org/stable/c/cec9867ee55478ef5dcb2adf030fe0c442a4c4ee · Patch
• https://git.kernel.org/stable/c/a3b2470399f679587c45abe56e551caf10becca2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49691 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49691 · Vendor Advisory
• https://git.kernel.org/stable/c/301bd140ed0b24f0da660874c7e8a47dad8c8222 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49691 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49691 · Vendor Advisory