CVE-2022-49972

CVE-2022-49972

High · published June 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xsk: Fix corrupted packets for XDP_SHARED_UMEM

Fix an issue in XDP_SHARED_UMEM mode together with aligned mode where

packets are corrupted for the second and any further sockets bound to

the same umem. In other words, this does not affect the first socket

bound to the umem. The culprit for this bug is that the initialization

of the DMA addresses for the pre-populated xsk buffer pool entries was

not performed for any socket but the first one bound to the umem. Only

the linear array of DMA addresses was populated. Fix this by populating

the DMA addresses in the xsk buffer pool for every socket bound to the

same umem.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Published
2025-06-18T15:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 5.19.85.19.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 18 JUN 11:00Z
    xsk: Fix corrupted packets for XDP_SHARED_UMEM
    cvelistv5