01 Record

CVE-2022-49872

net: gso: fix panic on frag_list with mixed head alloc types

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

net: gso: fix panic on frag_list with mixed head alloc types

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.51% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 43.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-04.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-05-01 14:10Z1 YR AGO
Last updated: 2026-08-05 08:56Z2 MO AGO
Reserved: 2025-05-01
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.5)
CNA CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: e2c162e28b5708f8e9cb86383c37944d6708c4c81ab0e3a1428915e58d712de6

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux162a5a8c3aff15c449e6b38355cdf80ab4f77a5a to < 5876b7f249a1ecbbcc8e35072c3828d6526d1c3a, 55fb612bef7fd237fb70068e2b6ff1cd1543a8ef to < 0a9f56e525ea871d3950b90076912f5c7494f00f, 821302dd0c51d29269ef73a595bdff294419e2cd to < bd5362e58721e4d0d1a37796593bd6e51536ce7a, 3dcbdb134f329842a38f0e6797191b885ab00a00 to < 65ad047fd83502447269fda8fd26c99077a9af47, 3dcbdb134f329842a38f0e6797191b885ab00a00 to < 50868de7dc4e7f0fcadd6029f32bf4387c102ee6, 3dcbdb134f329842a38f0e6797191b885ab00a00 to < ad25a115f50800c6847e0d841c5c7992a9f7c1b3, 3dcbdb134f329842a38f0e6797191b885ab00a00 to < 598d9e30927b15731e83797fbd700ecf399f42dd, 3dcbdb134f329842a38f0e6797191b885ab00a00 to < 9e4b7a99a03aefd37ba7bb1f022c8efab5019165, 92984818ff8cfd97311a5e0ac27f148a00df2b54, 4.9.194 to < 4.9.334, 4.14.145 to < 4.14.300, 4.19.74 to < 4.19.267, 5.2.16 to < 5.3, 5.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5876b7f249a1ecbbcc8e35072c3828d6526d1c3a
git.kernel.orghttps://git.kernel.org/stable/c/0a9f56e525ea871d3950b90076912f5c7494f00f
git.kernel.orghttps://git.kernel.org/stable/c/bd5362e58721e4d0d1a37796593bd6e51536ce7a
git.kernel.orghttps://git.kernel.org/stable/c/65ad047fd83502447269fda8fd26c99077a9af47
git.kernel.orghttps://git.kernel.org/stable/c/50868de7dc4e7f0fcadd6029f32bf4387c102ee6
git.kernel.orghttps://git.kernel.org/stable/c/ad25a115f50800c6847e0d841c5c7992a9f7c1b3
git.kernel.orghttps://git.kernel.org/stable/c/598d9e30927b15731e83797fbd700ecf399f42dd
git.kernel.orghttps://git.kernel.org/stable/c/9e4b7a99a03aefd37ba7bb1f022c8efab5019165

07 Fixed in

Debian 12

linux
Fixed in 6.0.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.0.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.0.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.