CVE-2022-50536

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the tcp bpf send verdict() function within the net/ipv4/tcp bpf.c module. During redirection, the eval variable is assigned to SK REDIRECT after apply bytes data is sent. If the message contains more data, the sock put() function is called multiple times, leading to the repeated release of a TCP socket. This can impact the confidentiality, integrity, and availability of the protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.