CVE-2022-49330: tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd

Q: Does exploitation require local access, authentication, or user interaction?

No. The provided severity vector identifies the attack vector as network-based, with low attack complexity and no required privileges or user interaction.

Q: What is the likely operational impact?

The flaw can cause a divide-by-zero condition in TCP MTU probing code, creating an availability impact. The severity vector indicates high availability impact with no stated confidentiality or integrity impact.

Q: How might an affected system show evidence of this issue?

The reported symptom is a kernel WARNING involving tcp_mtup_probe_success and tcp_snd_cwnd_set in the TCP IPv4 input path. The supplied report was observed on a 5.18.0 syzkaller kernel build.

Published Feb 26, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

tcp: fix tcpmtupprobesuccess vs wrong sndcwnd

syzbot got a new report [1] finally pointing to a very old bug, added in initial support for MTU probing.

tcpmtuprobe() has checks about starting an MTU probe if tcpsndcwnd(tp) >= 11.

But nothing prevents tcpsndcwnd(tp) to be reduced later and before the MTU probe succeeds.

This bug would lead to potential zero-divides.

Debugging added in commit 40570375356c ("tcp: add accessors to read/set tp->sndcwnd") has paid off :)

While we are at it, address potential overflows in this code.

[1] WARNING: CPU: 1 PID: 14132 at include/net/tcp.h:1219 tcpmtupprobesuccess+0x366/0x570 net/ipv4/tcpinput.c:2712 Modules linked in: CPU: 1 PID: 14132 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-07857-gbabf0bb978e3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:tcpsndcwndset include/net/tcp.h:1219 [inline] RIP: 0010:tcpmtupprobesuccess+0x366/0x570 net/ipv4/tcpinput.c:2712 Code: 74 08 48 89 ef e8 da 80 17 f9 48 8b 45 00 65 48 ff 80 80 03 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa b0 c5 f8 <0f> 0b e9 16 fe ff ff 48 8b 4c 24 08 80 e1 07 38 c1 0f 8c c7 fc ff RSP: 0018:ffffc900079e70f8 EFLAGS: 00010287 RAX: ffffffff88c0f7f6 RBX: ffff8880756e7a80 RCX: 0000000000040000 RDX: ffffc9000c6c4000 RSI: 0000000000031f9e RDI: 0000000000031f9f RBP: 0000000000000000 R08: ffffffff88c0f606 R09: ffffc900079e7520 R10: ffffed101011226d R11: 1ffff1101011226c R12: 1ffff1100eadcf50 R13: ffff8880756e72c0 R14: 1ffff1100eadcf89 R15: dffffc0000000000 FS: 00007f643236e700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1ab3f1e2a0 CR3: 0000000064fe7000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tcpcleanrtxqueue+0x223a/0x2da0 net/ipv4/tcpinput.c:3356 tcpack+0x1962/0x3c90 net/ipv4/tcpinput.c:3861 tcprcvestablished+0x7c8/0x1ac0 net/ipv4/tcpinput.c:5973 tcpv6dorcv+0x57b/0x1210 net/ipv6/tcpipv6.c:1476 skbacklogrcv include/net/sock.h:1061 [inline] releasesock+0x1d8/0x4c0 net/core/sock.c:2849 releasesock+0x5d/0x1c0 net/core/sock.c:3404 skstreamwaitmemory+0x700/0xdc0 net/core/stream.c:145 tcpsendmsglocked+0x111d/0x3fc0 net/ipv4/tcp.c:1410 tcpsendmsg+0x2c/0x40 net/ipv4/tcp.c:1448 socksendmsgnosec net/socket.c:714 [inline] socksendmsg net/socket.c:734 [inline] syssendto+0x439/0x5c0 net/socket.c:2119 dosyssendto net/socket.c:2131 [inline] sesyssendto net/socket.c:2127 [inline] x64syssendto+0xda/0xf0 net/socket.c:2127 dosyscallx64 arch/x86/entry/common.c:50 [inline] dosyscall64+0x2b/0x70 arch/x86/entry/common.c:80 entrySYSCALL64afterhwframe+0x46/0xb0 RIP: 0033:0x7f6431289109 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f643236e168 EFLAGS: 00000246 ORIGRAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f643139c100 RCX: 00007f6431289109 RDX: 00000000d0d0c2ac RSI: 0000000020000080 RDI: 000000000000000a RBP: 00007f64312e308d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff372533af R14: 00007f643236e300 R15: 0000000000022000

Affected Software

168 affected componentsFixes available

Linux Kernel

Linux Linux kernel>=2.6.17<4.9.318

Linux Linux kernel>=4.10<4.14.283

Linux Linux kernel>=4.15<4.19.247

Linux Linux kernel>=4.20<5.4.198

Linux Linux kernel>=5.5<5.10.122

Linux Linux kernel>=5.11<5.15.47

Linux Linux kernel>=5.16<5.17.15

Linux Linux kernel>=5.18<5.18.4

debian/linux<5.18.5-1

5.18.5-1

debian/linux<5.18.5-1

5.18.5-1

debian/linux<5.18.5-1

5.18.5-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-azure<4.15.0-1150.165~14.04.1

4.15.0-1150.165~14.04.1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-lts-xenial*

ubuntu/linux-aws-hwe<4.15.0-1140.151~16.04.1

4.15.0-1140.151~16.04.1

ubuntu/linux-azure<4.15.0-1150.165~16.04.1

4.15.0-1150.165~16.04.1

ubuntu/linux-gcp<4.15.0-1135.151~16.04.2

4.15.0-1135.151~16.04.2

ubuntu/linux-hwe<4.15.0-192.203~16.04.1

4.15.0-192.203~16.04.1

ubuntu/linux-oracle<4.15.0-1105.116~16.04.1

4.15.0-1105.116~16.04.1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-hwe-edge*

ubuntu/linux-kvm*

ubuntu/linux-fips*

ubuntu/linux<4.15.0-192.203

4.15.0-192.203

ubuntu/linux-aws<4.15.0-1140.151

4.15.0-1140.151

ubuntu/linux-aws-5.4<5.4.0-1085.92~18.04.1

5.4.0-1085.92~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1150.165

4.15.0-1150.165

ubuntu/linux-azure-5.4<5.4.0-1091.96~18.04.1

5.4.0-1091.96~18.04.1

ubuntu/linux-gcp-4.15<4.15.0-1135.151

4.15.0-1135.151

ubuntu/linux-gcp-5.4<5.4.0-1089.97~18.04.1

5.4.0-1089.97~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-126.142~18.04.1

5.4.0-126.142~18.04.1

ubuntu/linux-ibm-5.4<5.4.0-1033.37~18.04.1

5.4.0-1033.37~18.04.1

ubuntu/linux-kvm<4.15.0-1126.131

4.15.0-1126.131

ubuntu/linux-oracle<4.15.0-1105.116

4.15.0-1105.116

ubuntu/linux-oracle-5.4<5.4.0-1083.91~18.04.1

5.4.0-1083.91~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1070.80~18.04.1

5.4.0-1070.80~18.04.1

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2079.84

4.15.0-2079.84

ubuntu/linux-azure-fips<4.15.0-2060.66

4.15.0-2060.66

ubuntu/linux-fips<4.15.0-1097.108

4.15.0-1097.108

ubuntu/linux-gcp-fips<4.15.0-2044.49

4.15.0-2044.49

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-126.142

5.4.0-126.142

ubuntu/linux-aws<5.4.0-1085.92

5.4.0-1085.92

ubuntu/linux-aws-5.15<5.15.0-1020.24~20.04.1

5.15.0-1020.24~20.04.1

ubuntu/linux-azure<5.4.0-1091.96

5.4.0-1091.96

ubuntu/linux-azure-5.15<5.15.0-1020.25~20.04.1

5.15.0-1020.25~20.04.1

ubuntu/linux-bluefield<5.4.0-1046.51

5.4.0-1046.51

ubuntu/linux-gcp<5.4.0-1089.97

5.4.0-1089.97

ubuntu/linux-gcp-5.15<5.15.0-1018.24~20.04.1

5.15.0-1018.24~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-48.54~20.04.1

5.15.0-48.54~20.04.1

ubuntu/linux-ibm<5.4.0-1033.37

5.4.0-1033.37

ubuntu/linux-intel-iotg-5.15<5.15.0-1016.21~20.04.1

5.15.0-1016.21~20.04.1

ubuntu/linux-iot<5.4.0-1004.6

5.4.0-1004.6

ubuntu/linux-kvm<5.4.0-1075.80

5.4.0-1075.80

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-48.54~20.04.1

5.15.0-48.54~20.04.1

ubuntu/linux-oracle<5.4.0-1083.91

5.4.0-1083.91

ubuntu/linux-oracle-5.15<5.15.0-1018.23~20.04.1

5.15.0-1018.23~20.04.1

ubuntu/linux-raspi<5.4.0-1070.80

5.4.0-1070.80

ubuntu/linux-riscv-5.15<5.15.0-1019.22~20.04.1

5.15.0-1019.22~20.04.1

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1085.92+fips1

5.4.0-1085.92+fips1

ubuntu/linux-azure-fips<5.4.0-1091.96+fips1

5.4.0-1091.96+fips1

ubuntu/linux-fips<5.4.0-1061.69

5.4.0-1061.69

ubuntu/linux-gcp-fips<5.4.0-1089.97+fips1

5.4.0-1089.97+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-48.54

5.15.0-48.54

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1020.24

5.15.0-1020.24

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1020.25

5.15.0-1020.25

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1024.30.1

5.15.0-1024.30.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1018.24

5.15.0-1018.24

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1016.19

5.15.0-1016.19

ubuntu/linux-gkeop<5.15.0-1003.5

5.15.0-1003.5

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1015.17

5.15.0-1015.17

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1016.21

5.15.0-1016.21

ubuntu/linux-kvm<5.15.0-1018.22

5.15.0-1018.22

ubuntu/linux-lowlatency<5.15.0-48.54

5.15.0-48.54

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1007.7

5.15.0-1007.7

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1018.23

5.15.0-1018.23

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1015.17

5.15.0-1015.17

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-realtime<5.15.0-1021.21

5.15.0-1021.21

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1150.165~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1140.151~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1150.165~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1135.151~16.04.2
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-192.203~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1105.116~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-192.203
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1140.151
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1085.92~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1150.165
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1091.96~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1135.151
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1089.97~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-126.142~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1033.37~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1126.131
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1105.116
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1083.91~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1070.80~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2079.84
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2060.66
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1097.108
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2044.49
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-126.142
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1085.92
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.24~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1091.96
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.25~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1046.51
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1089.97
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.24~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1033.37
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1016.21~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1004.6
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1075.80
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1083.91
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.23~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1070.80
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1019.22~20.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1085.92+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1091.96+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1061.69
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1089.97+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.24
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.25
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1024.30.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.24
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1016.19
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1003.5
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.17
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1016.21
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.22
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1007.7
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.23
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.17
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.21
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.18.5-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1

Event History

Feb 26, 2025

CVE Published

via MITRE·02:10 AM

Data Sourced

via MITRE·02:10 AM

DescriptionSeverity

Data Sourced

via OSV·07:01 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·07:01 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Does exploitation require local access, authentication, or user interaction?

No. The provided severity vector identifies the attack vector as network-based, with low attack complexity and no required privileges or user interaction.

What is the likely operational impact?

The flaw can cause a divide-by-zero condition in TCP MTU probing code, creating an availability impact. The severity vector indicates high availability impact with no stated confidentiality or integrity impact.

How might an affected system show evidence of this issue?

The reported symptom is a kernel WARNING involving tcp_mtup_probe_success and tcp_snd_cwnd_set in the TCP IPv4 input path. The supplied report was observed on a 5.18.0 syzkaller kernel build.

CVE-2022-49330: tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd

Affected Software

Remediation

Event History

Frequently Asked Questions

Does exploitation require local access, authentication, or user interaction?

What is the likely operational impact?

How might an affected system show evidence of this issue?

Company

Resources

Contact