Linux kernel TCP Buffer Overflow DoS

🗓️ 29 Jan 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 19 Views

Vulnerabilities in Linux kernel net/ipv4/tcp.c enable improper resource identifier control, causing service failures.

Reporter	Title	Published	Views	Family All 16
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
Circl	CVE-2022-48819	16 Jul 202415:26	–	circl
CVE	CVE-2022-48819	16 Jul 202411:44	–	cve
Cvelist	CVE-2022-48819 tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case	16 Jul 202411:44	–	cvelist
Debian CVE	CVE-2022-48819	16 Jul 202411:44	–	debiancve
NVD	CVE-2022-48819	16 Jul 202412:15	–	nvd
osv_debian	DEBIAN-CVE-2022-48819	16 Jul 202412:15	–	osv_debian
osv_ubuntu	UBUNTU-CVE-2022-48819	16 Jul 202412:15	–	osv_ubuntu
Positive Technologies	PT-2022-7704	3 Feb 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-48819: Undefined Security Weakness	16 Jul 202400:00	–	rapid7

Vulners

Node

red_hat,red_hat_enterprise_linuxMatch9

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-48819
git	www.git.kernel.org/linus/f8d9d938514f46c4892aff6bfe32f425e84d81cc
git	www.git.kernel.org/stable/c/47f3860c4931175f112f28dcac66eacca9b1040f
git	www.git.kernel.org/stable/c/f8d9d938514f46c4892aff6bfe32f425e84d81cc
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10
lore	www.lore.kernel.org/linux-cve-announce/2024071649-CVE-2022-48819-16f6@gregkh/
lore	www.lore.kernel.org/linux-cve-announce/2024071649-CVE-2022-48819-16f6@gregkh/T/
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-cve-2022-48816-cve-2022-48819/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-48819
cve	www.cve.org/CVERecord

28 Feb 2025 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.6

CVSS 35.5

EPSS0.00231

linux kernel network tcp resource control service disruption