PT-2025-40137
CVE-2022-50452
·
Published
2022-10-19
·
Updated
2025-10-23
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the cake queuing discipline (qdisc). Specifically, a null pointer dereference can occur when the
cake init() function fails during the initialization of a default qdisc. This happens when the tins pointer becomes NULL, leading to a general protection fault during the cake dequeue one() function call within cake reset(). The issue arises during the process of qdisc create dflt(), cake init(), and subsequent resource clearing in cake reset(). The call trace indicates the problem originates from accessing a null pointer within the cake dequeue one() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾