CVE-2022-49903: ipv6: fix WARNING in ip6_route_net_exit_late()
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix WARNING in ip6routenetexitlate()
During the initialization of ip6routenetinitlate(), if file ipv6route or rt6stats fails to be created, the initialization is successful by default. Therefore, the ipv6route or rt6stats file doesn't be found during the remove in ip6routenetexitlate(). It will cause WRNING.
The following is the stack information: name 'rt6stats' WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:712 removeprocentry+0x389/0x460 Modules linked in: Workqueue: netns cleanupnet RIP: 0010:removeprocentry+0x389/0x460 PKRU: 55555554 Call Trace: <TASK> opsexitlist+0xb0/0x170 cleanupnet+0x4ea/0xb00 processonework+0x9bf/0x1710 workerthread+0x665/0x1080 kthread+0x2e4/0x3a0 retfromfork+0x1f/0x30 </TASK>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49903?
CVE-2022-49903 has been classified with a severity rating of moderate due to its potential impact on the Linux kernel's IPV6 routing functionalities.
How do I fix CVE-2022-49903?
To fix CVE-2022-49903, users should update their Linux kernel to the latest version where this vulnerability has been patched.
What impact does CVE-2022-49903 have on Linux systems?
CVE-2022-49903 can cause warnings during the initialization of IPV6 routing components, potentially leading to system instability.
Is CVE-2022-49903 exploitable remotely?
CVE-2022-49903 does not appear to be directly exploitable over a network, but it can affect network stability if not addressed.
When was CVE-2022-49903 reported?
CVE-2022-49903 was reported in 2022 and was resolved with a fix in subsequent Linux kernel updates.