CVE-2022-49672

Feb. 26, 2025, 7:01 a.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: net: tun: unlink NAPI from device on destruction Syzbot found a race between tun file and device destruction. NAPIs live in struct tun_file which can get destroyed before the netdev so we have to del them explicitly. The current code is missing deleting the NAPI if the queue was detached first.

Product(s) Impacted

Product Versions
Linux Kernel

Weaknesses

References

https://git.kernel.org/stable/c/3b9bc84d311104906d2b4995a9a02d7b7ddab2db
https://git.kernel.org/stable/c/8145f77d38de4f88b8a69e1463f5c09ba189d77c
https://git.kernel.org/stable/c/82e729aee59acefe135fceffadcbc5b86dd4f1b9
https://git.kernel.org/stable/c/8661d4b8faa2f7ee7a559969c0a7c57f077b1728
https://git.kernel.org/stable/c/a8cf919022373c97a84fe596bbea544f909c485d
https://git.kernel.org/stable/c/bec1be0a745ab420718217e3e0d9542a75108989

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-02-26
CVE-2022-49672

Date

  • Published: Feb. 26, 2025, 7:01 a.m.
  • Last Modified: Feb. 26, 2025, 7:01 a.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.