Critical NULL Pointer Dereference in Linux Kernel - CVE-2022-49973
Summary
CVE-2022-49973: In the Linux kernel, the following vulnerability has been resolved: skmsg: Fix wrong last sg check in sk_msg_recvmsg() Fix one kernel NULL pointer dereference as below: [ 224.462334] Call Trace: [ 224.462394] tcp_bpf_rec... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its robustness and versatility, supporting a wide range of devices and architectures. However, like any complex software, it is susceptible to vulnerabilities that can compromise system stability and security. CVE-2022-49973 specifically affects the skmsg subsystem, which handles socket message processing, leading to potential system crashes.
Vulnerability Detail
CVE-2022-49973 is a vulnerability in the Linux kernel that arises from an improper check in the sk_msg_recvmsg() function. This flaw can lead to a NULL pointer dereference, causing the kernel to crash when certain conditions are met during socket message processing. The vulnerability was introduced in a commit that altered the last scatter-gather (sg) check without adequately marking the end of the scatterlist in specific cases, particularly during sockmap redirection. If exploited, this vulnerability could lead to denial of service, impacting system availability.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2022-49973 represents a significant vulnerability within the Linux kernel that can lead to system crashes due to a NULL pointer dereference. Users are strongly advised to update their systems to the patched version to mitigate the risk. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49973 is a vulnerability in the Linux kernel that can lead to a NULL pointer dereference, potentially causing system crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Exploitation of this vulnerability can lead to denial of service, resulting in system instability and crashes.
Yes, a patch is available in version 6.0.2-1 of the Linux package. It is recommended to update to this version.
While there are no specific workarounds, it is crucial to monitor your systems for any unusual behavior and apply the patch as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
