Invalid Opcode Vulnerability in Linux Kernel's LAPB Device Management
Summary
CVE-2022-49859: In the Linux kernel, the following vulnerability has been resolved: net: lapbether: fix issue of invalid opcode in lapbeth_open() If lapb_register() failed when lapb device goes to up for the first time, the NAPI is not... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system operations. The LAPB (Link Access Procedure, Balanced) is a protocol used for data transmission in networking. This vulnerability affects the LAPB device management, specifically during the device initialization process, which can lead to system instability.
Vulnerability Detail
In the Linux kernel, an issue was identified in the LAPB device management where the function lapb_register() could fail when the LAPB device is brought up for the first time. If this failure occurs, the NAPI (New API for packet processing) is not disabled, leading to an invalid opcode error when the device is attempted to be brought up a second time. This vulnerability can cause kernel crashes and system instability, potentially affecting all applications relying on the LAPB device.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it is available.
Conclusion
The CVE-2022-49859 vulnerability in the Linux kernel's LAPB device management poses significant risks, including system crashes and instability. Users are urged to update their systems to the patched version to ensure safety. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49859 is a vulnerability in the Linux kernel related to the LAPB device management that can lead to kernel crashes due to an invalid opcode error.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. You can check your application against this vulnerability using the Vulert playground without any signup.
The vulnerability can cause kernel crashes and system instability, affecting all applications that depend on the LAPB device.
Yes, a patch has been released in version 6.0.10-1 of the Linux package. It is recommended to update to this version or later.
While there are no specific workarounds available, it is crucial to plan for an update as soon as possible to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
