CVE-2022-50073

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference bug has been identified in the Linux kernel, specifically in the tap driver. The issue occurs when the skb->dev field is null, which is required by the dev parse header protocol function. This bug is triggered when tap get user calls virtio net hdr to skb, and the skb->dev field is set after this call. The problem arises because dev parse header protocol needs the skb->dev field to be valid. Setting skb->dev before the call in tap.c resolves the issue.

Recommendations To resolve this issue, set skb->dev before the call to virtio net hdr to skb in tap.c. As a temporary workaround, consider restricting the use of the tap driver until a patch is available.