CVE-2022-50865: tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
In the Linux kernel, the following vulnerability has been resolved:
tcp: fix a signed-integer-overflow bug in tcpaddbacklog()
The type of skrcvbuf and sksndbuf in struct sock is int, and in tcpaddbacklog(), the variable limit is caculated by adding skrcvbuf, sksndbuf and 64 1024, it may exceed the max value of int and overflow. This patch reduces the limit budget by halving the sndbuf to solve this issue since ACK packets are much smaller than the payload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50865?
CVE-2022-50865 has been classified as a high severity vulnerability due to the potential for a signed integer overflow.
How do I fix CVE-2022-50865?
To fix CVE-2022-50865, you should update the Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2022-50865?
CVE-2022-50865 affects the Linux kernel across various distributions where the vulnerable versions are deployed.
What are the potential consequences of CVE-2022-50865 exploitation?
Exploitation of CVE-2022-50865 could lead to application crashes or potentially allow an attacker to execute arbitrary code.
Is CVE-2022-50865 present in all Linux kernel versions?
No, CVE-2022-50865 is not present in all Linux kernel versions; it specifically affects versions prior to the patch being applied.