CVE-2022-49092

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the deletion of routes with nexthop objects. The issue occurs when trying to delete a route pointing to a nexthop id without specifying nhid but matching on an interface, resulting in a kernel warning. The warning is triggered by the fib info nh() function in include/net/nexthop.h. The vulnerability is caused by the kernel's attempt to delete a route with a nexthop object, which is managed separately.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.