CVE-2022-50365

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to skbuff (socket buffer) handling during pull operations. Extending the tail of a skbuff can lead to unexpected behavior when using helpers like BPF FUNC skb pull data to read partial content beyond the skb headlen, particularly in scenarios involving GSO (Generic Segmentation Offload) frag lists that are linear with no head frag. This can result in a kernel BUG at net/core/skbuff.c:4219.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.