CVE-2022-49727: ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix signed integer overflow in l2tpip6sendmsg
When len >= INTMAX - transhdrlen, ulen = len + transhdrlen will be overflow. To fix, we can follow what udpv6 does and subtract the transhdrlen from the max.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49727?
CVE-2022-49727 has a severity rating of medium due to the potential for a signed integer overflow that could impact the Linux kernel's functionality.
How do I fix CVE-2022-49727?
To address CVE-2022-49727, update your Linux kernel to a version that includes the fix, which is usually found in the latest stable releases.
Which Linux kernel versions are affected by CVE-2022-49727?
CVE-2022-49727 affects various versions of the Linux kernel, specifically from versions earlier than 4.9.320 up to 5.19-rc1.
What type of vulnerability is CVE-2022-49727?
CVE-2022-49727 is classified as a signed integer overflow vulnerability in the Linux kernel's IPv6 implementation.
Can CVE-2022-49727 be exploited remotely?
Yes, CVE-2022-49727 could be exploited remotely if conditions allow for crafted messages that trigger the overflow.