CVE-2022-49672

EUVD-2022-54561
In the Linux kernel, the following vulnerability has been resolved:

net: tun: unlink NAPI from device on destruction

Syzbot found a race between tun file and device destruction.
NAPIs live in struct tun_file which can get destroyed before
the netdev so we have to del them explicitly. The current
code is missing deleting the NAPI if the queue was detached
first.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
4.15 ≤
𝑥
< 4.19.251
linuxlinux_kernel
4.20 ≤
𝑥
< 5.4.204
linuxlinux_kernel
5.5 ≤
𝑥
< 5.10.129
linuxlinux_kernel
5.11 ≤
𝑥
< 5.15.53
linuxlinux_kernel
5.16 ≤
𝑥
< 5.18.10
linuxlinux_kernel
5.19:rc1
linuxlinux_kernel
5.19:rc2
linuxlinux_kernel
5.19:rc3
linuxlinux_kernel
5.19:rc4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.123-1
fixed
bookworm (security)
6.1.128-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.234-1
fixed
sid
6.12.16-1
fixed
trixie
6.12.12-1
fixed
References
https://git.kernel.org/stable/c/3b9bc84d311104906d2b4995a9a02d7b7ddab2db
https://git.kernel.org/stable/c/8145f77d38de4f88b8a69e1463f5c09ba189d77c
https://git.kernel.org/stable/c/82e729aee59acefe135fceffadcbc5b86dd4f1b9
https://git.kernel.org/stable/c/8661d4b8faa2f7ee7a559969c0a7c57f077b1728
https://git.kernel.org/stable/c/a8cf919022373c97a84fe596bbea544f909c485d
https://git.kernel.org/stable/c/bec1be0a745ab420718217e3e0d9542a75108989