CVE-2022-49975
bpf: Don't redirect packets with invalid pkt_len
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Don't redirect packets with invalid pkt_len Syzbot found an issue [1]: fq_codel_drop() try to drop a flow whitout any skbs, that is, the flow->head is null. The root cause, as the [2] says, is because that bpf_prog_test_run_skb() run a bpf prog which redirects empty skbs. So we should determine whether the length of the packet modified by bpf prog or others like bpf_prog_test is valid before forwarding it directly.
Timeline
ID reserved
By Linux
Published
- 17 months later
· 17 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.27% · top 81% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 5293efe62df81908f2e90c9820c7edcc8e61f5e9 – < 8b68e53d56697a59b5c53893b53f508bbdf272a0
- affected 5293efe62df81908f2e90c9820c7edcc8e61f5e9 – < 6204bf78b2a903b96ba43afff6abc0b04d6e0462
- affected 5293efe62df81908f2e90c9820c7edcc8e61f5e9 – < a75987714bd2d8e59840667a28e15c1fa5c47554
- affected 5293efe62df81908f2e90c9820c7edcc8e61f5e9 – < 72f2dc8993f10262092745a88cb2dd0fef094f23
- affected 5293efe62df81908f2e90c9820c7edcc8e61f5e9 – < fd1894224407c484f652ad456e1ce423e89bb3eb
- affected 4.9
- unaffected < 4.9
- unaffected 5.4.212 – ≤ 5.4.*
- unaffected 5.10.141 – ≤ 5.10.*
- unaffected 5.15.65 – ≤ 5.15.*
- unaffected 5.19.7 – ≤ 5.19.*
- unaffected 6.0 – ≤ *
References (5)
- https://git.kernel.org/stable/c/8b68e53d56697a59b5c53893b53f508bbdf272a0 (opens in a new tab)
- https://git.kernel.org/stable/c/6204bf78b2a903b96ba43afff6abc0b04d6e0462 (opens in a new tab)
- https://git.kernel.org/stable/c/a75987714bd2d8e59840667a28e15c1fa5c47554 (opens in a new tab)
- https://git.kernel.org/stable/c/72f2dc8993f10262092745a88cb2dd0fef094f23 (opens in a new tab)
- https://git.kernel.org/stable/c/fd1894224407c484f652ad456e1ce423e89bb3eb (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49975)Record last updated .