Kernel Crash Vulnerability in Linux Package: mptcp Memory Pressure Issue
Summary
CVE-2022-49198: In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb Got crash when doing pressure test of mptcp: =============================... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It supports various networking protocols, including MultiPath TCP (mptcp), which enhances TCP by allowing multiple paths for data transmission. This vulnerability arises from a flaw in the mptcp implementation, specifically during memory pressure situations, leading to potential system crashes.
Vulnerability Detail
The vulnerability, identified as CVE-2022-49198, occurs when the mptcp implementation initializes the tcp_tsorted_anchor before releasing the socket buffer (skb). Under memory pressure, the sk_wmem_schedule function may return false, leading to the kfree_skb function being called. This results in an attempt to release a destination reference that has already been freed, causing a kernel crash. The crash manifests as a kernel paging request error, indicating that the kernel tried to execute a non-executable memory page, which can be exploited by attackers to destabilize the system.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is advisable to monitor system performance and apply the patch as soon as it becomes available.
Conclusion
CVE-2022-49198 is a critical vulnerability in the Linux kernel's mptcp implementation that can lead to system crashes under specific conditions. It is essential to update to the patched version to mitigate risks associated with this vulnerability. Regular monitoring and prompt updates are crucial for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49198 is a vulnerability in the Linux kernel related to the mptcp implementation that can cause kernel crashes under memory pressure.
This vulnerability can lead to system instability and crashes, potentially allowing attackers to exploit the kernel and disrupt services.
Yes, a patch is available in version 5.17.3-1 of the Linux package for Debian 12 and 13.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If you cannot update immediately, ensure to monitor your system for unusual behavior and apply the patch as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
