CVE-2022-49672: net: tun: unlink NAPI from device on destruction
In the Linux kernel, the following vulnerability has been resolved:
net: tun: unlink NAPI from device on destruction
Syzbot found a race between tun file and device destruction. NAPIs live in struct tunfile which can get destroyed before the netdev so we have to del them explicitly. The current code is missing deleting the NAPI if the queue was detached first.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49672?
CVE-2022-49672 has a medium severity rating due to a race condition that may affect network performance and stability.
How do I fix CVE-2022-49672?
To fix CVE-2022-49672, ensure that you update your Linux kernel to the latest patched version provided by your distribution.
What software is affected by CVE-2022-49672?
CVE-2022-49672 affects the Linux kernel, which is used in various Linux distributions.
What are the implications of CVE-2022-49672?
The implications of CVE-2022-49672 involve potential network disruptions due to improper handling of the tun device during destruction.
Was CVE-2022-49672 publicly disclosed?
Yes, CVE-2022-49672 was publicly disclosed and addressed in the Linux kernel updates.