PT-2025-8660 · Linux+2 · Linux Kernel+2

Wang Yufen · Published 2022-06-08 · Updated 2025-04-16 · CVE-2022-49727

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A signed integer overflow issue has been identified in the Linux kernel, specifically in the ipv6 component, related to the l2tp ip6 sendmsg function. This occurs when the length (len) is greater than or equal to INT MAX - transhdrlen, causing an overflow when calculating ulen = len + transhdrlen. The issue is resolved by subtracting transhdrlen from the maximum value, similar to the approach used in udpv6.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2026-02627

CVE-2022-49727

OESA-2025-1336

SUSE-SU-2025:1293-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 522

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49727.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49292 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1336 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49388 · Security Note
• https://git.kernel.org/stable/c/0e818d433fc2718fe4da044ffca7431812a7e04e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49727 · Security Note
• https://git.kernel.org/stable/c/034246122f5c5e2e2a0b9fe04e24517920e9beb1 · Patch
• https://git.kernel.org/stable/c/2cf73c7cb6125083408d77f43d0e84d86aed0000 · Patch
• https://git.kernel.org/stable/c/2f42389d270f2304c8855b0b63498a5a4d0c053d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49381 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49727 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49727 · Vendor Advisory
• https://git.kernel.org/stable/c/6c4e3486d21173d60925ef52e512cae727b43d30 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49350 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49727 · Security Note