CVE-2022-49662: ipv6: fix lockdep splat in in6_dump_addrs()

Published Feb 26, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix lockdep splat in in6dumpaddrs()

As reported by syzbot, we should not use rcudereference() when rcureadlock() is not held.

WARNING: suspicious RCU usage 5.19.0-rc2-syzkaller #0 Not tainted

net/ipv6/addrconf.c:5175 suspicious rcudereferencecheck() usage!

other info that might help us debug this:

rcuscheduleractive = 2, debuglocks = 1 1 lock held by syz-executor326/3617: #0: ffffffff8d5848e8 (rtnlmutex){+.+.}-{3:3}, at: netlinkdump+0xae/0xc20 net/netlink/afnetlink.c:2223

stack backtrace: CPU: 0 PID: 3617 Comm: syz-executor326 Not tainted 5.19.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <TASK> dumpstack lib/dumpstack.c:88 [inline] dumpstacklvl+0xcd/0x134 lib/dumpstack.c:106 in6dumpaddrs+0x12d1/0x1790 net/ipv6/addrconf.c:5175 inet6dumpaddr+0x9c1/0xb50 net/ipv6/addrconf.c:5300 netlinkdump+0x541/0xc20 net/netlink/afnetlink.c:2275 netlinkdumpstart+0x647/0x900 net/netlink/afnetlink.c:2380 netlinkdumpstart include/linux/netlink.h:245 [inline] rtnetlinkrcvmsg+0x73e/0xc90 net/core/rtnetlink.c:6046 netlinkrcvskb+0x153/0x420 net/netlink/afnetlink.c:2501 netlinkunicastkernel net/netlink/afnetlink.c:1319 [inline] netlinkunicast+0x543/0x7f0 net/netlink/afnetlink.c:1345 netlinksendmsg+0x917/0xe10 net/netlink/afnetlink.c:1921 socksendmsgnosec net/socket.c:714 [inline] socksendmsg+0xcf/0x120 net/socket.c:734 syssendmsg+0x6eb/0x810 net/socket.c:2492 syssendmsg+0xf3/0x170 net/socket.c:2546 syssendmsg net/socket.c:2575 [inline] dosyssendmsg net/socket.c:2584 [inline] sesyssendmsg net/socket.c:2582 [inline] x64syssendmsg+0x132/0x220 net/socket.c:2582 dosyscallx64 arch/x86/entry/common.c:50 [inline] dosyscall64+0x35/0xb0 arch/x86/entry/common.c:80 entrySYSCALL64afterhwframe+0x46/0xb0

Affected Software

7 affected components
Linux Linux kernel
Linux Linux kernel>=5.13<5.15.53
Linux Linux kernel>=5.16<5.18.10
Linux Linux kernel=5.19-rc1
Linux Linux kernel=5.19-rc2
Linux Linux kernel=5.19-rc3
Linux Linux kernel=5.19-rc4

Event History

Feb 26, 2025
CVE Published
via MITRE·02:23 AM
Data Sourced
via MITRE·02:23 AM
Description
Data Sourced
via NVD·07:01 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2022-49662?

CVE-2022-49662 has a medium severity rating due to its potential for causing unexpected behavior in kernel operations.

2

How do I fix CVE-2022-49662?

To fix CVE-2022-49662, ensure your Linux kernel is updated to the latest patched version that resolves the vulnerability.

3

What systems are affected by CVE-2022-49662?

CVE-2022-49662 affects various versions of the Linux kernel that utilize IPv6 networking.

4

What is the main issue related to CVE-2022-49662?

The main issue related to CVE-2022-49662 involves improper usage of RCU (Read-Copy-Update) locking mechanisms in the IPv6 networking code.

5

Can CVE-2022-49662 be exploited remotely?

CVE-2022-49662 does not have any documented remote exploitation capability, but its presence could lead to instability within the affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203