PT-2025-38422 · Linux+4 · Linux Kernel+4
CVE-2022-50405
·
Publicado
2022-12-12
·
Atualizado
2025-10-31
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists in the VXLAN implementation when deleting a VXLAN device during packet reception. This can lead to a NULL pointer dereference within the
vxlan ecn decapsulate() function if the socket is released after vxlan sock is obtained from sk user data. The issue occurs when deleting a VXLAN device while packets are being received, potentially leading to system instability.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Improper Resource Release
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Centos
Linux Kernel
Red Hat
Suse