CVE-2022-49918: ipvs: fix WARNING in __ip_vs_cleanup_batch()
In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix WARNING in ipvscleanupbatch()
During the initialization of ipvsconnnetinit(), if file ipvsconn or ipvsconnsync fails to be created, the initialization is successful by default. Therefore, the ipvsconn or ipvsconnsync file doesn't be found during the remove.
The following is the stack information: name 'ipvsconnsync' WARNING: CPU: 3 PID: 9 at fs/proc/generic.c:712 removeprocentry+0x389/0x460 Modules linked in: Workqueue: netns cleanupnet RIP: 0010:removeprocentry+0x389/0x460 Call Trace: <TASK> ipvscleanupbatch+0x7d/0x120 opsexitlist+0x125/0x170 cleanupnet+0x4ea/0xb00 processonework+0x9bf/0x1710 workerthread+0x665/0x1080 kthread+0x2e4/0x3a0 retfromfork+0x1f/0x30 </TASK>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49918?
CVE-2022-49918 is classified with a medium severity rating due to its potential impact on the Linux kernel's ip_vs module.
How do I fix CVE-2022-49918?
To fix CVE-2022-49918, ensure your Linux kernel is updated to the latest version that contains the security patch.
What systems are affected by CVE-2022-49918?
CVE-2022-49918 affects the Linux kernel, specifically those utilizing the ip_vs connection tracking module.
Is CVE-2022-49918 a remote exploit?
No, CVE-2022-49918 does not constitute a remote exploit; it relates to internal failures in connection handling.
What are the potential impacts of CVE-2022-49918?
The potential impacts of CVE-2022-49918 include the risk of system stability issues and improper handling of connection states in Linux systems.